Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20240903-en
General
-
Target
file.exe
-
Size
187KB
-
MD5
0b963852688f37c062548d7ccf610b07
-
SHA1
698aefe85ccc31f42215ca1df14faf02bb36f17e
-
SHA256
224e4c17a089090cca9119d71fb2334fb15acf48bc92ea3e932c90c5ff3e769d
-
SHA512
8c8c833ecccb0c3d010899c7e7f934d41b592888f29c34d94955bb7db5956d513fb38126aa1dce7e41e65cf84efd91a8e023c7f26e3445d98eb40b4ca8773528
-
SSDEEP
3072:o0WJGrmn/HDUOvme0a3dTp9bhHRR0QJ8cNh/z7Aij9K:2z/HDexaRp9btRR02xgij
Malware Config
Signatures
-
Asyncrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource file.exe
Files
-
file.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 185KB - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ