General

  • Target

    DCRatBuild442.exe

  • Size

    2.9MB

  • MD5

    292f58a4935298fb74af4fc833a79ad3

  • SHA1

    94b7a21cc7b35fc5eb2000e4b52368d678694159

  • SHA256

    59aad546a2a32c7e540e7067d41fd51046f275ce8ca021dfe06f0dd2c1063779

  • SHA512

    e85fefb15b1baa98a5174fee07c44863edaee8fd70f0dc5eddbde6d9e6150f47cfbb1588ecad03937e110efc391204e003481cbaf9d62e3b1f7930459499df90

  • SSDEEP

    49152:ubA3j226JdATMCAhwaYFlxivisjKAjoGuBFhJDgGYWVmt:ubTJdXpYFlI7jKAjoGgTtsX

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • DCRatBuild442.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections