a7a7a7a32e4570e3f24ec5976e9b4a36dfda9d7c3d27a4e55d99574e99f5712a

Sharing

Copy URL Twitter E-mail

General

Target
a7a7a7a32e4570e3f24ec5976e9b4a36dfda9d7c3d27a4e55d99574e99f5712a
Size 23KB
Sample260706-j9f2jsct2s
SHA256 a7a7a7a32e4570e3f24ec5976e9b4a36dfda9d7c3d27a4e55d99574e99f5712a
MD5 4ab649ee9edc13a5d2b9b6aba7ee8f27
SHA1 ca526fe093bdb3bde9f0ac4a2683d7f447da2bd0
SHA512 3d6e6e06911b185754ecb583ecd837d14e3054aacdd199f49c97a2caaed2aff41efca4da01db97033f066b4cc34508d1c3c4ff9ea00123e044a28438599d5b48
SSDEEP 384:J1D+OmUbuMuynUjYbmCz3n4Ue7W/GJ+ixkj+22AMCxAoP1uc5:niUbOysYxn4Ux/k+sY2WAId5
TLSH
T111B22933FA268623E4A24571183EBB668ABF75701F25D4C7F3C08E2B05709E1AD7191B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7a7a7a32e4570e3f24ec5976e9b4a36dfda9d7c3d27a4e55d99574e99f5712a

File Explorer

a7a7a7a32e4570e3f24ec5976e9b4a36dfda9d7c3d27a4e55d99574e99f5712a

.exe 23KB

a7a7a7a32e4570e3f24ec5976e9b4a36dfda9d7c3d27a4e55d99574e99f5712a

IMPHASH 2c31125c7cb871005908b2cd2b320fb2
SHA256 a7a7a7a32e4570e3f24ec5976e9b4a36dfda9d7c3d27a4e55d99574e99f5712a
MD5 4ab649ee9edc13a5d2b9b6aba7ee8f27
SHA1 ca526fe093bdb3bde9f0ac4a2683d7f447da2bd0
SHA512 3d6e6e06911b185754ecb583ecd837d14e3054aacdd199f49c97a2caaed2aff41efca4da01db97033f066b4cc34508d1c3c4ff9ea00123e044a28438599d5b48
SSDEEP 384:J1D+OmUbuMuynUjYbmCz3n4Ue7W/GJ+ixkj+22AMCxAoP1uc5:niUbOysYxn4Ux/k+sY2WAId5
TLSH
T111B22933FA268623E4A24571183EBB668ABF75701F25D4C7F3C08E2B05709E1AD7191B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14530

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\JustNanix\source\repos\StealthRAT\Release\Client.pdb

kernel32

GetFileAttributesExW CloseHandle CreateProcessW CopyFileW GetLastError MultiByteToWideChar GetTempPathA SetUnhandledExceptionFilter WaitForSingleObject CreateMutexW GetModuleFileNameW GetCurrentProcess CreateDirectoryW Sleep GetExitCodeProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime GetModuleHandleW GetStartupInfoW IsDebuggerPresent InitializeSListHead UnhandledExceptionFilter

advapi32

GetTokenInformation RegCloseKey RegQueryValueExA GetUserNameA RegOpenKeyExA OpenProcessToken

shell32

SHGetFolderPathW ShellExecuteW

msvcp140

?_Xlength_error@std@@YAXPBD@Z

ws2_32

WSAStartup setsockopt freeaddrinfo recv getaddrinfo connect htons socket closesocket WSACleanup send inet_ntop

vcruntime140

memcpy __CxxFrameHandler3 __std_exception_destroy __std_exception_copy _CxxThrowException __current_exception __current_exception_context memset _except_handler4_common memmove

api-ms-win-crt-runtime-l1-1-0

_exit _initterm_e _initialize_onexit_table _register_onexit_function _register_thread_local_exe_atexit_callback _controlfp_s terminate _initterm _get_narrow_winmain_command_line _initialize_narrow_environment _configure_narrow_argv _cexit _crt_atexit _c_exit _set_app_type _seh_filter_exe _invalid_parameter_noinfo_noreturn exit

api-ms-win-crt-stdio-l1-1-0

fwrite _set_fmode __p__commode fclose fopen_s

api-ms-win-crt-heap-l1-1-0

malloc free _set_new_mode _callnewh

api-ms-win-crt-string-l1-1-0

_wcsicmp

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

a7a7a7a32e4570e3f24ec5976e9b4a36dfda9d7c3d27a4e55d99574e99f5712a

kernel32

advapi32

shell32

msvcp140

ws2_32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic