Behavioral task
behavioral1
Sample
a52ed7cc857c5a48246c336bd22ac226100a005a8fa1306debe166af6018090d.exe
Resource
win7-20240708-en
General
-
Target
a52ed7cc857c5a48246c336bd22ac226100a005a8fa1306debe166af6018090d.exe
-
Size
48KB
-
MD5
23575c31dfc1d767ffdcb95b286e3722
-
SHA1
4f45e5054dbae1b7c768d34fe31a4b8c69b87799
-
SHA256
a52ed7cc857c5a48246c336bd22ac226100a005a8fa1306debe166af6018090d
-
SHA512
db2cccfa494a8b2d08f520f20ce9d5853fa45d1775d92ea211154fe2dec309f0da0531dbe62d3504e6a2e270d358b5edf8272a11a49b54f6b93c8c278f5bd364
-
SSDEEP
1536:CN1RxXpwH/XbzY1zkT+aXMouA152k6OsKmVcl:CtPwH/bzm8CkwK8Y
Malware Config
Extracted
asyncrat
0.5.6A
null
62.108.37.42:8808
iaqvopecckrrmxlkj
-
delay
5
-
install
true
-
install_file
Microsoft Corporation.exe
-
install_folder
%AppData%
Signatures
Files
-
a52ed7cc857c5a48246c336bd22ac226100a005a8fa1306debe166af6018090d.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ