Behavioral task
behavioral1
Sample
AsyncClient test.exe
Resource
win7-20240705-en
General
-
Target
AsyncClient test.exe
-
Size
79KB
-
MD5
a29f945c15c3187b7b890f89c3b6cb49
-
SHA1
0b9e9ed0f6807475dbbff87542eac10286b33945
-
SHA256
47bcb7f1a4b0ff298324a6121acdbb739820aca4aca1289094134e9681895e61
-
SHA512
4c44982e5a5c142cf2a9226f86c39098f4c42f7d873af747a8ede4ca2dba9334ee6f53abf95984e7b5fa836bba91d4a38d68f447281db8d1b7062097068d910c
-
SSDEEP
1536:RuYH9T34y2e2QUbcHSSVQDbGIzfp3OY7NdWmW:RuYdT34y2e2QUbcyNbGIzx3l7NfW
Malware Config
Extracted
asyncrat
0.5.8
Default
0ZOg4qZ0tD2Z
-
delay
3
-
install
true
-
install_file
TEST.exe
-
install_folder
%AppData%
-
pastebin_config
https://pastebin.com/raw/s14cUU5G
Signatures
Files
-
AsyncClient test.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ