Static task
static1
Behavioral task
behavioral1
Sample
Broken_rainbow.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Broken_rainbow.exe
Resource
win10v2004-20220812-en
General
-
Target
Broken_rainbow.exe
-
Size
326KB
-
MD5
aeca97e963f00db8c1f3fdd2d804cb3e
-
SHA1
10c941a11ff285cbda43d4455f3e2f5c66fc2090
-
SHA256
33033c6f503ed0e4614371ff6a5a0453c8ee19b7eabf462a1655cf0a53a538fb
-
SHA512
66dbd5d4110013b60d8719edbcb11fc16016d6a38fb182c57286f925e4e3dc9ea88d7df402c9a415572b20c58e22fe5e5bd8ef9f932e639c2a2f0721166a776a
-
SSDEEP
6144:dOuLy7lGCLPEEbf5CHlRImmzC7PDTyuTSgHaho3boo8/9NHOAOrn:Au27lGCLPaRImmzCnTyuTScJ4/9NO1
Malware Config
Signatures
Files
-
Broken_rainbow.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 233KB - Virtual size: 233KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ