Static task
static1
Behavioral task
behavioral1
Sample
Rusticaland-launcher.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Rusticaland-launcher.exe
Resource
win10v2004-20230220-en
General
-
Target
Rusticaland-launcher.exe
-
Size
63.7MB
-
MD5
9f075a4fe48f3ac544494e734971c8ff
-
SHA1
102eff693a0c8c617f7585b66dad768bbe283f50
-
SHA256
b300b5de8b8d4a4cb8fc35d9490d139eb1c8417b2620f1a29b525b96b7b6a935
-
SHA512
3216529ff849579e5d5ce0860735eb15b75ce2ce66973f397a6120c3e67bed4161bdfdfb398fee0571708b538561d8146d5e088ccac8b4fcdb720fc85e81370f
-
SSDEEP
1572864:dirQdi9XMLAwZhMncFU5NoOn50HrbY40Tt3C8C5Rjr+t:ddiV6A7cFUbpnK3Kt3C8ajKt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Rusticaland-launcher.exe
Files
-
Rusticaland-launcher.exe.exe windows x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 63.6MB - Virtual size: 63.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ