GunBound[.]rtz | Triage

Sharing

Copy URL Twitter E-mail

General

Target

GunBound.rtz
Size

5.0MB
MD5

ec9843f80fdacc144efa5f699bba2234
SHA1

fb6adf0470c31d14f0e4bc0ad6afd077b1f3a449
SHA256

5461692ccb371b09cd736086984fb6979f2c7434857fed03f5f99b579da8beba
SHA512

e2da1585a7fe3759d100e7264374c4070517488f844c434a10b840ba08767a1a4fcc94f6cd71d93bfc5b32cc812555f72498addb78977ef4bdb05f2d599c3bea
SSDEEP

24576:sysX/NNLK6HYXd68WDN5Ooj8Y+5uoxgBxxaGwfqAjme6bG+HAQ/rC3Cb0CddS97o:svlNod68WDbhfosxIW3TLvvuTfgr/R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
GunBound.rtz

Files

GunBound.rtz
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

unpacked
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

unpacked
Size: 604KB - Virtual size: 604KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

unpacked
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.snaker
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dlib
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE