Static task
static1
Behavioral task
behavioral1
Sample
RiotAIO.exe
Resource
win10v2004-20230703-en
General
-
Target
RiotAIO.exe
-
Size
40.4MB
-
MD5
77898241c1f4deff16608dd5a55bcb77
-
SHA1
220988daa24f39cf5f36b37cbec2932eb25e9859
-
SHA256
ee785cb350efac8f36a9a1ec8c50e7999160da420839a3d2176a67e3fc657311
-
SHA512
16db7fe0ed811ec59a011d245cb8b2f9ed51b98497fe3bdf36dee7da512a2b2a50c8ef104782f3523d5d8b20f61410dcc6d3bd4e212f3aa7d5044bd1b8d42396
-
SSDEEP
393216:QkTPmRocRNmFWXYTI9DU8oSHDGhAriW1CPwDv3uFhtU2lvz4JeoAfWQxSyFbNDXq:VGocvsI9AN3Betya
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource RiotAIO.exe
Files
-
RiotAIO.exe.exe windows x64
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
lstrcpy
Sections
Size: 69KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 5.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
aeahagix Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wkyuxupe Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ