Behavioral task
behavioral1
Sample
sce.exe
Resource
win7-20240903-en
General
-
Target
sce.exe
-
Size
63KB
-
MD5
12c955565a6a0fcc6003158b046f3a27
-
SHA1
a73e764f90bd531a3efd3fe7b921f8d55885878f
-
SHA256
b2408be432206f62d7d9b715aab914da3647afec606d496654219bb0c13598cc
-
SHA512
cd787c1b1d821853aa96d85d883b9bab1d7b526924b998817393bbd00706fa070543608a6d2ebf3ad9d688600d7b8180ae0bc5de1e4e3535e891f953951551fa
-
SSDEEP
768:Cm0vnfEXf78awC8A+XU8FWiud3iN/YN1+T46SBGEmDbD6ph0oXAKknDZ7SusdpqM:qEXiejBit+xnUbsh9AlnNeusdpqKmY7
Malware Config
Extracted
asyncrat
Default
127.0.0.1:6000
147.185.221.23:6000
-
delay
1
-
install
false
-
install_folder
%AppData%
Signatures
Files
-
sce.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ