General
-
Target
ASetup.exe
-
Size
45KB
-
MD5
90cfa453f4547946867a79aff1658063
-
SHA1
6ed842e6b26ca3615aa1c71603b0ba4c1d5afbf1
-
SHA256
7573d78b477f336808a033e64ac511c6b10a7a23293a3c9c43542e7d5d83d4fd
-
SHA512
d9b6484d756f632426e9d2486a4e050b026f7f18607798966c1fe2bace822318ae209fcde97cc978d97699f6a2ef656366de6805ecddf969020529b4fc5ac2d4
-
SSDEEP
768:6ufxhTXbDdbWUn7yqmo2qRn/rssPJZOPIctzjbMgX9i4XjttXlB0kBDZ9AB:6ufxhTXnN2AwIf3ct3bDXM4zttVPdaB
Malware Config
Extracted
asyncrat
0.5.8
Default
217.138.255.186:10625
kZo1jJG0Ua0U
-
delay
3
-
install
false
-
install_folder
%AppData%
Signatures
Files
-
ASetup.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ