Static task
static1
General
-
Target
rot.exe
-
Size
201.3MB
-
MD5
f75d3d990600c2bd82714747bf3d6546
-
SHA1
a4795f0f3d7958d14487663aa26e9a18f9be9dba
-
SHA256
d6b42999ba2e5064f151a9d53bd641dbf296d22da587bfb95ab8f1141fb637a3
-
SHA512
232788fd5c04e14c03dd4e5ecf7f9fb8e6fbaba6a6c29adf9a44bcb80db65e6952bff84029af5818eab2b88bfdccd032608a78523d90e6ba49a179199bd4a836
-
SSDEEP
12288:jXLbt12i2c9b20yCX4q4a3VYBMELmu/wxoTB6gqf+TYVeKCE5eJNq0QN:b3+5LN28B6Lfi2+EgN/w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource rot.exe
Files
-
rot.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 347KB - Virtual size: 347KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ