Rhydon[.]exe | Triage

Resubmissions

20/09/2022, 18:42

220920-xchqrshgdl 4

20/09/2022, 18:41

220920-xbvc6shgcr 1

Sharing

Copy URL Twitter E-mail

General

Target

Rhydon.exe
Size

897KB
MD5

a27acd0b6eeeedf402a254f30752468f
SHA1

86ecb5dc64fb17d2ec59b174b4d80adaa1b97326
SHA256

d98e9bb2f8bc8567075bc4e9556f46007097f984bc58b95f46f2676400d71ee5
SHA512

d496a58a6ee8850d27974595afe7730a7ee9101aa6bfa6db0b22a8821b87427e2a82342c1b9bcfbc79026b90b41a17e08acd6fda4b899405646c4c0da57a9112
SSDEEP

6144:XyAOFCrzmSBSV+H7krqjf5svCVTFYNv3JbKUzjKJfH/X4:DrzmSBSV+H7krqjRsWyE/4

Score

N/A

Malware Config

Signatures

Files

Rhydon.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 795KB - Virtual size: 795KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ