Behavioral task
behavioral1
Sample
874903654f69f92abed429836efe790fb4f8759bdfe7ec17d3f3819775287a71.exe
Resource
win7-20241010-en
General
-
Target
874903654f69f92abed429836efe790fb4f8759bdfe7ec17d3f3819775287a71.exe
-
Size
45KB
-
MD5
2b444e0ce937dc1c27c897ca76d67089
-
SHA1
d098d8f9c02012932758b9e533776794d5576313
-
SHA256
874903654f69f92abed429836efe790fb4f8759bdfe7ec17d3f3819775287a71
-
SHA512
e75391d5396b2658ada0c7a822e95944f43bf09cdc0c287eab608d8e94787185e8687b3982cd15fc4708c7f3c6f1a3c63c85518a49fce9707421fe1960e848c3
-
SSDEEP
768:vuwCfTg46YbWUn8jjmo2qrDKjGKG6PIyzjbFgX3i6eIig3buA0BDZSx:vuwCfTgp/2OKYDy3bCXSTIigLZCdSx
Malware Config
Extracted
asyncrat
0.5.7B
Default
127.0.0.1:6606
127.0.0.1:7707
127.0.0.1:8808
AsyncMutex_6SI8OkPnk
-
delay
3
-
install
false
-
install_folder
%AppData%
Signatures
Files
-
874903654f69f92abed429836efe790fb4f8759bdfe7ec17d3f3819775287a71.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ