General
-
Target
nicegame.exe
-
Size
45KB
-
MD5
6e2b9d4f22b2b200964f3dd556eedc1c
-
SHA1
0bb8b71ba4df36f73d27cae26d69ad6d7b6bbc70
-
SHA256
061b0f097574bc509d7b1562c3531ee8e34c6fce784be47b4239b80ac4523d76
-
SHA512
dcb5a1459ab2f7e55768312e51b89100655de8b596cea356278c1ac5ad16a39a4e806852cb6017fb3d79629f9e47650e0affe39f1ecb5533ee8f5045ed675c7c
-
SSDEEP
768:Bunq5TgoqzqWU8d9rmo2qrgp9+V8H8tPIwzjbWgX3iBYcNiPSgCBDZ3x:Bunq5TgNR2vO8w3bJXS+ag8d3x
Malware Config
Extracted
asyncrat
0.5.8
Default
127.0.0.1:3489
media-stat.gl.at.ply.gg:3489
QQJBm0alB0p0
-
delay
3
-
install
false
-
install_folder
%AppData%
Signatures
Files
-
nicegame.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ