Behavioral task
behavioral1
Sample
60C30150ED574E2AFB00ACF25819D85BBA6E2F646F6A7.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
60C30150ED574E2AFB00ACF25819D85BBA6E2F646F6A7.exe
Resource
win10v2004-20231023-en
General
-
Target
60C30150ED574E2AFB00ACF25819D85BBA6E2F646F6A7.exe
-
Size
24KB
-
MD5
586675b05d6fe0a4e3719b4d1c34a751
-
SHA1
a754650cc8bb52f285346df00ca1e382b37468fe
-
SHA256
60c30150ed574e2afb00acf25819d85bba6e2f646f6a785ef2ffe4326bc52e5d
-
SHA512
1dd3101014a1d6fefb07bc9f7b95ae6072cee4aa8fde323f314fbabc3fee3cd57ec8afb2bbc0bb059704157a244775ac85a76cf77309286b7f7d6e962220df75
-
SSDEEP
192:ZH+8Pa9S8kjYTDGgbcp4LlbiD+voWoCnKtui+eeDg1ABkGxVXUkoN9RJ4:ZHP/jYTDGggpKiD+vfBiLeDeAnxvoN2
Malware Config
Extracted
revengerat
NyanCatRevenge
alice2019.myftp.biz:7575
2d4c6a4fc5e1455e
Signatures
-
Revengerat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60C30150ED574E2AFB00ACF25819D85BBA6E2F646F6A7.exe
Files
-
60C30150ED574E2AFB00ACF25819D85BBA6E2F646F6A7.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ