Static task
static1
Behavioral task
behavioral1
Sample
INCLUDE/MACRO/STDCALL.vbs
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
INCLUDE/MACRO/STDCALL.vbs
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
RIVANON.exe
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
RIVANON.exe
Resource
win10v2004-20221111-en
General
-
Target
b8fbad89cf08448a4bc6cda1c97aecb3b3ef20b1f960d5d57b4127b41c8f5fbc
-
Size
10KB
-
MD5
57ecccb062f8bdf76f84fba0015cb322
-
SHA1
fe1b7c02dec380416318304d27ade8186d6e3643
-
SHA256
b8fbad89cf08448a4bc6cda1c97aecb3b3ef20b1f960d5d57b4127b41c8f5fbc
-
SHA512
6daec4fe96fd400a70534436e06ea03c658abe4a213647e246304117534a4bfa2812c20b4ffc7eb8027d8b1880cd5270fdb96367e243e2b8963743a16513d56a
-
SSDEEP
192:qOhNmd+eAGE0Jjms3p+M1Y0lFHwgN/+PIUfBEQoHmlMSHxMagkQBIYTxWtZqw9WO:qb7a0wz89tUpEQoHmlpMfkZiYH9l
Malware Config
Signatures
Files
-
b8fbad89cf08448a4bc6cda1c97aecb3b3ef20b1f960d5d57b4127b41c8f5fbc.zip
-
INCLUDE/EXEHDR.INC
-
INCLUDE/KERNEL.INC
-
INCLUDE/MACRO/IMPORT.INC
-
INCLUDE/MACRO/STDCALL.INC.vbs
-
README.TXT
-
RIVANON.EXE.exe windows x86
98c88d882f01a3f6ac1e5f7dfd761624
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
ExitProcess
user32
MessageBoxA
Sections
.flat Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
idata Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE