Static task
static1
Behavioral task
behavioral1
Sample
Rectify11Installer.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Rectify11Installer.exe
Resource
win10v2004-20230221-en
General
-
Target
Rectify11Installer.exe
-
Size
99.9MB
-
MD5
6348ff536f1a5eb023e284506e9bdf8d
-
SHA1
b9a93dd3ff18655628c23d147d35e49f705e1f72
-
SHA256
52e9c120740d34c14097dec7a9a5d63bb99a48e681e75da57dd03510d7b89fe9
-
SHA512
a8c8e1f6ca9120fecf5cc062367b3ad4ef0b0086c6b9fd7a5f7cd0b03190300a3d01425e9bf2e473e4aacd045e5f3604dab33636cefa1b73abbf8be32e44c2d0
-
SSDEEP
3145728:fh/0WnVvkoEo+aOF0qDe0/AXbsKPCLXsZ3gTJ3fiG2arvazi:p/0WVvKRruqDe0hqCLK3F6v
Malware Config
Signatures
-
Nirsoft 1 IoCs
resource yara_rule sample Nirsoft
Files
-
Rectify11Installer.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 99.7MB - Virtual size: 99.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ