Static task
static1
Behavioral task
behavioral1
Sample
RTL-2023053001.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
RTL-2023053001.exe
Resource
win10v2004-20230915-en
General
-
Target
RTL-2023053001.exe
-
Size
667KB
-
MD5
62f8113d85e2f1278d24b45f4f66f58c
-
SHA1
49c5fa70e5ae4acfa17ae187c1c5ba62749bd758
-
SHA256
63efc3445014bdf5bc7c990e30c279a5f1ef3aca8760335c91e5c774aac13d73
-
SHA512
b9f1f8fa5bba988c189fefb50fe82b2567c4e8f8ec6d5406fd249a40204cce16aa80db893b0c4dbf9c2bb15f05a7e8de7161087de6cc7e5dfce8cd947551014a
-
SSDEEP
12288:tneMkNumB07lzQo8Pe8yKD4sL9vdcp+tVqTDs2FpL2lgowgKjW:VbyYkS8yKcsLpdcp+tys266owG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource RTL-2023053001.exe
Files
-
RTL-2023053001.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 665KB - Virtual size: 664KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ