Behavioral task
behavioral1
Sample
meme.exe
Resource
win7-20240903-en
General
-
Target
meme.exe
-
Size
74KB
-
MD5
8640b5945987e1baa65eebf113691b9a
-
SHA1
18d2b93f62af0233b40d61a89d9febecccd639d9
-
SHA256
ca3cc88d8c0deb99e153ac606045841d01cafc280bc545c770e001f6c0a56835
-
SHA512
3626590c895062602ec5d05baff1b8bfc2560fb42c2fb9ca4e7668ae805f192f81ee5a25593a7209ad7b3020873999bca1a53323c97b5d10f4a2df9cc0dfb7ed
-
SSDEEP
1536:vUFAcxehvCw2PMV11/D5IIH1b8/AJpQzceLVclN:vU6cxe1/2PMVjrXH1b8IJpQ3BY
Malware Config
Extracted
asyncrat
Venom RAT + HVNC + Stealer + Grabber v6.0.3
Default
88.173.32.153:8081
ogjwcholityhqynwcm
-
delay
1
-
install
false
-
install_file
meme
-
install_folder
%AppData%
Signatures
Files
-
meme.exe.exe windows:4 windows x86 arch:x86
Password: password1111
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ