Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
AsyncClient.exe
-
Size
47KB
-
MD5
3a75ec60203e3ee0a4fda9b3f1f6f991
-
SHA1
f210464cc96d81478e7f767d4ecb8a43d4559fcf
-
SHA256
fa5ad278a5180b1d70fbedc48695aee9b1cf9a9035f2f7176c19a5f043057eb4
-
SHA512
7aeedf706b9ce5ac527a9aa0b631d89751a56fd63cc459a8a990f0111a4a9ac20ca5a34c3e3ba7303523f8c505596009d7023d6d5f741a1f12495a83cc7398f3
-
SSDEEP
768:luQ0PToSkHbiWUULCimo2qBoBPcW0+ro3API2Z7ugg7CYEL0bRmdDcXrGlxU0KwW:luQ0PT3Ux2oW0+rS2ZKaLAbRGcXraxva
Malware Config
Extracted
asyncrat
0.5.8
Default
act-kick.gl.at.ply.gg:58631
FZ1mENmMubo7
-
delay
3
-
install
false
-
install_folder
%AppData%
Signatures
Files
-
AsyncClient.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ