G-700RAT V6[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

G-700RAT V6.exe
Size

104.3MB
MD5

acc6044f64eab9cdef27c7a587d0d100
SHA1

9c917d1094930baf5e798319e9a964aa14d1ca8d
SHA256

6289456a644a5392de77382b9658596ffe4a76a5687635ff08edd6ce95d07eaa
SHA512

67a6c38ced37abae11ff6e57e5c975ad8119c7b34b7c94631688fba21a75815c89dd4c18958bfdfb8492fa7a042ea8d7be02c68cd357f087d19be2e83efe9322
SSDEEP

1572864:eM/Cyz/9ahsdqnzGWazlCKQNrTQaFDbeCjbeCNVBVCj+5j0NmwwIIutCMsF8:eMnTgOMnzGWazQK2o77j+mbwjutC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
G-700RAT V6.exe

Files

G-700RAT V6.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

Size: 91.3MB - Virtual size: 91.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 12.6MB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 304KB - Virtual size: 304KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE