Static task
static1
Behavioral task
behavioral1
Sample
AnaRAT.exe
Resource
win11-20250217-en
General
-
Target
AnaRAT.zip
-
Size
4.4MB
-
MD5
ce48e73065378090d3d570be9b8e0f85
-
SHA1
2fc22ea97519a06633272cfcecfdc45b0c13dc8e
-
SHA256
8b8df7833ae44d4409e5a68f119d1f0ee15e6538c053b5d26652150f44688e93
-
SHA512
db2db31177da5981a06198366fe62c8c8bf8f6c445b9528d5e7bf9ecc31381c2e9e5f8d463517f25c03c3caf06e1a6c003e5870460f1638b04998e914d34cf9d
-
SSDEEP
98304:kA9OhGibmbf9w4CXJb0Swzf/XMJWk6dloWKtEbRFIiXh1XTdY:/8m2vJb0xnjk7WKARFDXXm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/AnaRAT.exe
Files
-
AnaRAT.zip.zip
-
AnaRAT.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 278KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ