Behavioral task
behavioral1
Sample
1733858044dd572d66bc3a8dabfe408fb29ad3eddb6c690affcab2d50d59673d0019848271178.dat-decoded.exe
Resource
win7-20240903-en
General
-
Target
1733858044dd572d66bc3a8dabfe408fb29ad3eddb6c690affcab2d50d59673d0019848271178.dat-decoded.exe
-
Size
47KB
-
MD5
54af7dde5c98e20089ae4a5dc295cb32
-
SHA1
d7affca6008365f9e8c48ed22847f98d97781738
-
SHA256
c66fdb0e04d7bee6ac4513956d1cf5f9fc21e27cad0d32bbc7906ff4440ed2e9
-
SHA512
c2fa8350cdaa1ba19da3bea5c6ef2a90b6cce3f6a9618483cebaf83c4ed47a1dd90aa5a4708ee31fe35a13ef991aa4d66fa3858497bda3d61a8ba1d5c9a52352
-
SSDEEP
768:xGq+s3pUtDILNCCa+Di+0jd3gLqRp8AoPiIiYbrge4k6kNaioVFIJ5vEgK/JLZVS:8q+AGtQO+GaPAKBbUkN8C5nkJLZVclN
Malware Config
Extracted
asyncrat
1.0.7
Server
dcrsf.duckdns.org:5999
DcRatMutex_qwqdanchun
-
delay
1
-
install
false
-
install_folder
%AppData%
Signatures
Files
-
1733858044dd572d66bc3a8dabfe408fb29ad3eddb6c690affcab2d50d59673d0019848271178.dat-decoded.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ