Behavioral task
behavioral1
Sample
2256-5684-0x0000000000370000-0x0000000000390000-memory.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2256-5684-0x0000000000370000-0x0000000000390000-memory.exe
Resource
win10v2004-20240802-en
General
-
Target
2256-5684-0x0000000000370000-0x0000000000390000-memory.dmp
-
Size
128KB
-
MD5
871fa73e767bd618540c3cc32716eacd
-
SHA1
9daea07f1ed9c8921ff8f5d1009e0612437b7751
-
SHA256
d584d2cbbb9fcf94e80d68fb68a34c60b56704df69c1528457179b86f2f00749
-
SHA512
f74872f1dd2224efc569ee7d969201deb6bfc641179b582ebb5746b3df64a5ed6de4d722210d8a991e93e86771a13e837926b65db9f5582d8dd404bc8983270b
-
SSDEEP
3072:+DV3e6yxVIvBJTsbyfI8zfq/PqmHVYe3GPGz:glyxVIvBJTsbyI6fq/ygY0p
Malware Config
Signatures
-
Asyncrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2256-5684-0x0000000000370000-0x0000000000390000-memory.dmp
Files
-
2256-5684-0x0000000000370000-0x0000000000390000-memory.dmp.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ