Static task
static1
Behavioral task
behavioral1
Sample
Riot_Client.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Riot_Client.exe
Resource
win10v2004-20230220-en
General
-
Target
Riot_Client.exe
-
Size
6.7MB
-
MD5
0f9657a59961a52c08cdac8e54459756
-
SHA1
c41ad7c7073516650b3f47a439fd8c237092fdce
-
SHA256
023e1fcd8659fc92f4db9ce75b60ec2ddae9a8b919b74102333212f3baaca19a
-
SHA512
4f352d3d595925b989302bbd34e00ab3b55732817447703adcd1a7a0fe1816fcad1b255839f9362181271c8d1516ef9a2144843325b56a7c79c64f59987845ca
-
SSDEEP
196608:E1jd/KJ/1Vj6PNTjoBuwaZU/IEZL8p83:EY1V6PNTjoBuwuU/IEZLD3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Riot_Client.exe
Files
-
Riot_Client.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6.7MB - Virtual size: 6.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ