Static task
static1
Behavioral task
behavioral1
Sample
94100e5aa10700946bc196b704fb39d8857b3bb0ee9feef626b60abcc19d7e12.exe
Resource
win7-20220311-en
Behavioral task
behavioral2
Sample
94100e5aa10700946bc196b704fb39d8857b3bb0ee9feef626b60abcc19d7e12.exe
Resource
win10v2004-20220310-en
General
-
Target
94100e5aa10700946bc196b704fb39d8857b3bb0ee9feef626b60abcc19d7e12
-
Size
65KB
-
MD5
13a4841e9114114472aaaf0e3faa1be0
-
SHA1
d9b1529c9c5d0257a7c68c8517ab3ae01ae535c9
-
SHA256
94100e5aa10700946bc196b704fb39d8857b3bb0ee9feef626b60abcc19d7e12
-
SHA512
69747c9efbd3e7845068f5b53413b625a284b54e01623ab3c7bd413b8561d0a31f5d8cdd506f280eb8a06dd0f6df0d8636fe87c5cdda5c914e46e6bf1b4eab39
Malware Config
Signatures
-
RevengeRat Executable 1 IoCs
Processes:
resource yara_rule sample revengerat -
Revengerat family
Files
-
94100e5aa10700946bc196b704fb39d8857b3bb0ee9feef626b60abcc19d7e12.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 226B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ