Behavioral task
behavioral1
Sample
9f9ae90ac59ed36b59c5969528c53f6b64ad7f0da32cff8868f3518389aadca1.exe
Resource
win7-20240903-en
General
-
Target
9f9ae90ac59ed36b59c5969528c53f6b64ad7f0da32cff8868f3518389aadca1
-
Size
45KB
-
MD5
3cca84d51b8e3fc0c5e791a9ab93f535
-
SHA1
0ef28e0a1ca971f2eaa5627884ce4f30a8d33093
-
SHA256
9f9ae90ac59ed36b59c5969528c53f6b64ad7f0da32cff8868f3518389aadca1
-
SHA512
fdb54f70a70eb389fb968ad0b297913488302a56756dc95630f2ae7f40b8a2e2c1db3d3702995790be1cbbfc02f4482119682b98a9347d165970ac9228eae5b7
-
SSDEEP
768:WuaoDTQgnX/WUTxAvmo2qvLbYZJC3gbbb4n9jbdPIm1ojbvgX3iaF+y9rfvBDZGx:WuaoDTQ8W2sYG79jmm1AbYXSaF+yxfZu
Malware Config
Extracted
asyncrat
AsyncRAT
Opal
opal.wtf:8443
dYMvkMe51wJt
-
delay
1
-
install
false
Signatures
Files
-
9f9ae90ac59ed36b59c5969528c53f6b64ad7f0da32cff8868f3518389aadca1.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ