VanillaRat[.]exe | Triage

Sharing

General

Target

VanillaRat.exe
Size

1003KB
MD5

63e695a3ac69b33207847c37501dc89c
SHA1

bff6478ffc46201baff8b4e3f8151538a3099ef8
SHA256

7910204165b5361c5f022e7c8ce510d2947d850f651d4e85f8731d963409e789
SHA512

eab4d8e5e0631d1d5dd1a1f2c5f48372fae6143e4a51af3a3ee29fb5b70895a06018589c78c2f2606c6603a777dee5e7b5f29cb4a06f0289f01c287e7a27ab1f
SSDEEP

24576:og59nzOn6RU0rAxGLytABzMjhiZwxbRFXV9VLGIMD:og59ynbvxGLytA2bbFLV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VanillaRat.exe

Files

VanillaRat.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1000KB - Virtual size: 1000KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ