General
-
Target
VegaX.exe
-
Size
306KB
-
MD5
e52ab38e4693ff890f8d3bd1bdec4d66
-
SHA1
e720e0509bd160f1ed1eb9a00f0a27d0563c6e51
-
SHA256
15f14fb96d1b17ff75a2f1b2ce66ba59b18a69837401556f67e58a8cc85007a3
-
SHA512
0123a5c4b65708d75491b84fb23c19f49fe1e2b04ee55b7f41559d30832d3d9096a34ce561e5bc268a9c6a4350decd4676e7ff8c03cc7c40793c0efcb5fc2dea
-
SSDEEP
3072:uuGUTH1i2HHkDv4Abc1jEZIkfQh2qy3K0:uuGMPnYvhbB889
Malware Config
Extracted
asyncrat
0.5.8
Default
127.0.0.1:6606
127.0.0.1:7707
127.0.0.1:8808
98HFnwtTr1vs
-
delay
3
-
install
true
-
install_file
VegaX.exe
-
install_folder
%Temp%
Signatures
Files
-
VegaX.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ