Static task
static1
Behavioral task
behavioral1
Sample
RRQ_00980.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
RRQ_00980.exe
Resource
win10v2004-20230220-en
General
-
Target
RRQ_00980.img
-
Size
332KB
-
MD5
a76aa900ec043833035c1376daabfc2e
-
SHA1
b6f57e3aac6880cd8efce1dfeb55273c1b0039cc
-
SHA256
036adc167bc9a4e8cb2c1ccc904ff92200ad4a90dc045e921408aacb63f8572f
-
SHA512
22a9f28c4ceecaf8f7ac25f391d4e9a1a60413ca6003605c81315a8c0702cd2ff6cfa3bf79918f1b24a3b5cbe6db14d647da124ef7393ad8edea944333a2710f
-
SSDEEP
3072:iyamBpp48eTCZZiO1ix7ll/w8mo2CbPJNddNe0dbeNmFIrqvBzAhpNmPIr0n7GYE:iyaq42Ov/wNo2Ky0ngq5zhd
Malware Config
Signatures
Files
-
RRQ_00980.img.iso
-
RRQ_00980.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 278KB - Virtual size: 277KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ