General

  • Target

    DCRatBuild.exe

  • Size

    1.1MB

  • MD5

    2f814235170dbd4935c677b5e6cb2b95

  • SHA1

    4eff1e187dcf478908ff3331cbc1d182a8c0c9c6

  • SHA256

    ad0d6cc0289cf6ede131355b80a5b4e5adb5603e4e7eb09e7959bd4dcb0b168b

  • SHA512

    34817b23b9f597fcaf725117073c225ff4f6fc433bda34990c1f1d13429ca6e047acd5575f905e635320cdf05bc14f2d9bb5c08c25c9fee96c9e79d05811e90e

  • SSDEEP

    12288:aRZ+IoG/n9IQxW3OBsee2X+t4RbqzuJ8YWFIci5BT6pLCT8R1snhms/6jUk5/:U2G/nvxW3Ww0tqz9YWMzT6pDI18f5/

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • DCRatBuild.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections