C:\Users\TikTak\Desktop\tttt\VanillaRAT-1.7\AppTroubleshoot\obj\Debug\AppTroubleshoot.pdb
Behavioral task
behavioral1
Sample
1c251db408531a885fc2c5a9ed45d5b9ff22644af994aad169808b4b006ef0e1.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
1c251db408531a885fc2c5a9ed45d5b9ff22644af994aad169808b4b006ef0e1.exe
Resource
win10v2004-20241007-en
General
-
Target
1c251db408531a885fc2c5a9ed45d5b9ff22644af994aad169808b4b006ef0e1
-
Size
97KB
-
MD5
c5f3310680eb20bf08a3b329aa708ff5
-
SHA1
f80f762c04d4a75272d7fee38b2078f43379debb
-
SHA256
1c251db408531a885fc2c5a9ed45d5b9ff22644af994aad169808b4b006ef0e1
-
SHA512
f85075a06fe29aa49735c2c4763bd782db0c4fce97d9c0540303cbc24b0f83205d9dd51c89c364765705818178071194b14b885aabbe0d5af03774d74dd45f75
-
SSDEEP
3072:/jflZqdg4kPJttF06bk0HaYY6+7Y9dZb4:bf2dgjRWI+72
Malware Config
Signatures
-
Vanilla Rat payload 1 IoCs
resource yara_rule sample vanillarat -
Vanillarat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c251db408531a885fc2c5a9ed45d5b9ff22644af994aad169808b4b006ef0e1
Files
-
1c251db408531a885fc2c5a9ed45d5b9ff22644af994aad169808b4b006ef0e1.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ