sliver | 7c8ae80805f37bab4aea688396706a2a5304d1fc733b346a2367b86b7da8aafe | Triage

Sharing

General

Target

7c8ae80805f37bab4aea688396706a2a5304d1fc733b346a2367b86b7da8aafe
Size

14.5MB
MD5

0e77c3aeed4c8323c39e5856adcc40b2
SHA1

01f3d16eb3ee763d79c3f6a33490eb5aad3b4870
SHA256

7c8ae80805f37bab4aea688396706a2a5304d1fc733b346a2367b86b7da8aafe
SHA512

588484324b9707c13311c369cb2fe5cb2ec0c6b9f18c109b3805eb9f35e217ab3926751a97e6e879e2864e08376431801529c5462e077a34f69e85368af29db3
SSDEEP

98304:Vv3pMeRlKKexHoYw5c0w9ayoTLLE6IcewG+6t7:ZpaHjw5ZgayoTLYzdr

Score

10^/10

sliver

Malware Config

Signatures

Sliver RAT v2 1 IoCs

resource	yara_rule
sample	SliverRAT_v2

Sliver family
sliver

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7c8ae80805f37bab4aea688396706a2a5304d1fc733b346a2367b86b7da8aafe

Files

7c8ae80805f37bab4aea688396706a2a5304d1fc733b346a2367b86b7da8aafe
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 9.2MB - Virtual size: 9.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.5MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 260KB - Virtual size: 700KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ