General

  • Target

    ReferenceAddOn.exe

  • Size

    1.6MB

  • MD5

    c36b9755144d8beb907a1d1aa08a3385

  • SHA1

    5eae8431ac52e658d6187022a029841a86d4f9ce

  • SHA256

    904ec5b05a2a310af448ad8db09724fe2f4fc53c818a13db8691330077017373

  • SHA512

    429eb4b0f50453ec649d5ef85de2704e8acc3932e41032918ef17e9ee7eed380629974b9572943506f123d7066c82efbe10dddf8f1a4d873671eff39c81d311a

  • SSDEEP

    24576:U2G/nvxW3Ww0tBlHIvsFK6AYtZaRUkJUAXI/dzCaujAhuWUWqI9k2iSOJ3TE:UbA30fsxI/d90WSFF4

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ReferenceAddOn.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections