home

rat-scan v beta.exe

WindowsApplication1

Product:
WindowsApplication1

Version:
1.0.0.0

MD5:
20ebc958bcf799e175a694a400e98f6d

SHA-1:
ee4e831f933eb23fa2170fad1372b3d95c0feeee

SHA-256:
254dc80f4d3453c42fbd1a9d9203e7031d94ee41ca636fb699f3940f734c1689

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 11:22:54 PM UTC  (a few moments ago)

File size:
190.5 KB (195,072 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2013

Original file name:
rat-scan v beta.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\rat-scan v beta.exe

File PE Metadata
Compilation timestamp:
3/26/2013 12:20:51 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:BX8WCP4t1iMXf9yQJr7rNLHlyCDJeT9wREDUeDMcfRdCq:jiMXlfLE0JeTSU9Q

Entry address:
0x75DE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, B3, BF, 50, 51, 00, 00, 00, 00, 02, 00, 00, 00, 8E, 00, 00, 00, 1C, 80, 00, 00, 1C, 5A, 00, 00, 52, 53, 44, 53, C0, BE, 8A, 44, 5A, AD, 51, 4D, 81, 6D, 7C, 53, B4, DE, CC, 15, 01, 00, 00, 00, 43, 3A, 5C, 55, 73, 65, 72, 73, 5C, 48, 6F, 6D, 65, 5C, 44, 6F, 63, 75, 6D, 65, 6E, 74, 73, 5C, 56, 69, 73, 75, 61, 6C, 20, 53, 74, 75, 64, 69, 6F, 20, 32, 30, 31, 30...
 
[+]

Entropy:
6.4149

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
21.5 KB (22,016 bytes)

The file rat-scan v beta.exe has been seen being distributed by the following URL.

http://dc256.gulfup.com/QDAFxR.exe

Scan rat-scan v beta.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.