Static task
static1
Behavioral task
behavioral1
Sample
R2LRD8KT.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
R2LRD8KT.exe
Resource
win10v2004-20230703-en
General
-
Target
Sample Image.img
-
Size
1.2MB
-
MD5
9aeb85ac3103c381a85d21d36064a050
-
SHA1
6bf8bd22edb3b288785da2ba46297c1055ee2311
-
SHA256
4e2230087fc9c3f3e87b8508d14234d089169dc2219629889cf1f8e42a4a76ac
-
SHA512
a0fbe73ec5a66a7c2f59169b80c65ef691afb19cf96998f9e1ea4bf2e02f08339a0fc2be66838c76a5d3a5a4ca2ba037c0bd0b6bb4b9e771107b1f3d2f5a58bf
-
SSDEEP
3072:ty04M5LM86fLSQQccVZ7DEWN8QlB02l1t+4L7dzJiwJi:k04M5LM86fLSVccVZ7DEWCq1UC45
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/R2LRD8KT.EXE
Files
-
Sample Image.img.iso
-
R2LRD8KT.EXE.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ