Oxyco Rat V3‌‌[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Oxyco Rat V3‌‌.exe
Size

127.6MB
MD5

2c2ce8c0b820b418ba76a58ec8dccaeb
SHA1

823818a10a482af390063fbff411d7620532add4
SHA256

023974dfa4d9d303c0f123dd368125ad430c427ff8546bce93bf65533c7959fd
SHA512

a6559fd84bb30afab64fa68431db7e9ce0d69b9df1765871bd7c7b132326f847d518f5f098b164a1a8081fb8b17a7f05c318ded6aa1845e1e0dddf6d38085fe2
SSDEEP

3145728:OwlH1VrNO4u3+tUZ302ih086cmXfEcza5+53Chpp:OSVrM4u3+tdpEMvs3CPp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Oxyco Rat V3‌‌.exe

Files

Oxyco Rat V3‌‌.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 127.6MB - Virtual size: 127.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ