Static task
static1
Behavioral task
behavioral1
Sample
r.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
r.exe
Resource
win10v2004-20230703-en
General
-
Target
r.exe
-
Size
211KB
-
MD5
3d701d689dee841296606f10f757f833
-
SHA1
451980e9b0b3cb31f641f355ecb912b79fd3c83e
-
SHA256
6e9a09bf1689c78b26d3c61912cecc407a4e5be497ff10ae70f4aa1a0caed7c4
-
SHA512
93008e457ff343ca1b5659dd69ca640393e8c94844dba849ae1d46663e66237cee94657186c87a09f58d1d7aa209993148a4dcd0aedac282452fe00ce82553c3
-
SSDEEP
3072:AdMj8hW1kcrNltBgT8bYY3cUtNjT+Kc79AWMLtmM1SZS29sc+XoY2eOstyA:dwi/yTmb3cUtdTM7y7LtmM0ZE1O4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource r.exe
Files
-
r.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 207KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ