Behavioral task
behavioral1
Sample
Stub.exe
Resource
win7-20240708-en
General
-
Target
Stub.exe
-
Size
60KB
-
MD5
e50e5c919322ad54bd5ed6eefba01619
-
SHA1
988a6155484ea1e07883a1dd97ff1d97083adc5a
-
SHA256
e4384cce1f9ea5e5c1e2fdb0af7ed8f25724c2618e462ae9fced298c24d7b095
-
SHA512
5e017ccca9abeccf8837c4c249b09019db8ad06e041b5a3d14d97b5cb0e16c57651e548936b872171eac43c8d16bc864e4726c6431e6a5ff947b68163f395be5
-
SSDEEP
1536:4EKoM1cSSTTGBfu4maBqJubMo/ZlB9wyaeXAFmf+:XK4aBjmaBqJubMsp97hXAQm
Malware Config
Extracted
asyncrat
SuperBoo Rat v1.1
Default
com-distinct.gl.at.ply.gg:26706
SuperBoo_mtex_920393
-
delay
3
-
install
true
-
install_file
gang.exe
-
install_folder
%AppData%
Signatures
Files
-
Stub.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ