Static task
static1
Behavioral task
behavioral1
Sample
River loader v2/River.exe
Resource
win10v2004-20220812-en
General
-
Target
River loader v2.zip
-
Size
2.3MB
-
MD5
4b5e6946b2a1a382403af9dbbcbe384a
-
SHA1
6e4902aca3aabe198a73b3fd765410cdde103b27
-
SHA256
e0281bc501292ae4d2d9c30d9d3b3d3a158014a899aeeeea2c21fcb6935aafd0
-
SHA512
33ef487c69f3b5dad52a9adbbeeebb6ccf4a265a30107a5551287a83842c8c85dbee24570b4797b78ba8e129f402863dcbaabcf75b013b794c22161482fc6ce7
-
SSDEEP
49152:YqgOr91YrRbaq0/GgjWrpYRl+/YaB2t21BYRrGcvo8r0C9VRrs8oRMG5yl3aj6:YqqrRuxirSRl++kGRRf0GVRTJGkl26
Malware Config
Signatures
Files
-
River loader v2.zip.zip
-
River loader v2/Bunifu_UI_v1.5.3.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 226KB - Virtual size: 226KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
River loader v2/Readme.txt
-
River loader v2/River.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ