Static task
static1
Behavioral task
behavioral1
Sample
Rainbow Six Siege Hack.rar
Resource
win10v2004-20230621-en
Behavioral task
behavioral2
Sample
Rainbow Six Siege Hack/SelectedTypeHelp.exe
Resource
win10v2004-20230621-en
General
-
Target
Rainbow Six Siege Hack.rar
-
Size
3KB
-
MD5
422f0bb44315f54ea4de80479ac60e8f
-
SHA1
728b7a3f5f9dde8f59305ddb23e2c4be76ff11f4
-
SHA256
dce0e8a8d07f57109f263fe159984104f15ec9c4551e1dc9754ad0c1ab26a847
-
SHA512
6d417bd8da6f1e3bf567b4339d4dac428253c7f56137e664f48de70b30396386fa7acc4470f1deb2687b33ceb9044f4563cb1235f20d339ed459d107904bfc53
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Rainbow Six Siege Hack/SelectedTypeHelp.dll
Files
-
Rainbow Six Siege Hack.rar.rar
Password: wanwap1337
-
Rainbow Six Siege Hack/SelectedTypeHelp.dll.exe windows x86
Password: wanwap1337
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ