Behavioral task
behavioral1
Sample
AntonsFile.exe
Resource
win11-20250217-en
General
-
Target
AntonsFile.exe
-
Size
47KB
-
MD5
cf2ca438000d1b1eb52027e072633348
-
SHA1
225a0741c9cb1cdddd12dfad6895bb91bb218712
-
SHA256
002a936cc181ea7e45b5f441d90cfe633a9ba5abece878a789163ca2ef992374
-
SHA512
6c12d644711ac63005dfc958c69a7e5b842d1e66ae23d8f60373a171572398f73187197f1f480222469dfa371f1a6baea65c5189bbf8e4a593db0e0e907a1396
-
SSDEEP
768:EuQItT/QUscWUCezGmo2q8tULTWm3oPPIH+Lmo6d3bWBGMxJUzbK7ZhVgQ2MBDZ5:EuQItT/Lm2aTrteLYbWMMbUzbUTgQfd5
Malware Config
Extracted
asyncrat
0.5.8
Default
77.100.63.251:5631
wPgAGvV1528Y
-
delay
3
-
install
true
-
install_file
G.exe
-
install_folder
%AppData%
Signatures
Files
-
AntonsFile.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ