RTTInit
Static task
static1
1 signatures
General
-
Target
0F9BEA890B5F3C4AE24720371CD686FB.exe
-
Size
223KB
-
MD5
0f9bea890b5f3c4ae24720371cd686fb
-
SHA1
498df228aadb8d43626a4c42823ae5eef96fbee6
-
SHA256
cddce199c29332ffc45e69c37123ae633f47ac796b0417071ad2fe837d76e7ef
-
SHA512
f719323f984e6d57ccd99c2e82a9572435e068087142b36b3b5e666c9eeb1eeaf58a5b2572bae0db90e74ee89c1eda4eb72b9a38181c2cd47063808474d25e13
-
SSDEEP
3072:v1B0Ze4qc554gUNliS0R3Irh64ixwZZBfdnLUUUJwnA384RaOYc6r2cBRObXnvpw:doe4qY54gUNl70ppJynimr295F9yh
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0F9BEA890B5F3C4AE24720371CD686FB.exe
Files
-
0F9BEA890B5F3C4AE24720371CD686FB.exe.exe windows:6 windows x86
14f04ece5c9a415ee6aa0e126d06b5cc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rttdll
RTKProtect8087
RTKConfig
EWCMOSExtendHeap
RTT_Init_MSC8CRT
RTMPSetAPICModeACPI
RTCMOSSetSystemTime
RTSetKeyboard
RTSetFlags
CPUMonitorStart
TimerInit
CLKSetTimerIntVal
RTKPreemptionsON
RTKDebugVersion
RTKernelInit
RTKDelay
RTFileSystemList
ewgmi
GMIExecute
GMIInitialize
GMIDone
kernel32
DecodePointer
FlushFileBuffers
GetConsoleMode
GetConsoleOutputCP
SetFilePointerEx
CompareStringW
CloseHandle
LCMapStringW
LoadLibraryExW
EnterCriticalSection
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
IsDebuggerPresent
RaiseException
MultiByteToWideChar
WideCharToMultiByte
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetLastError
VirtualQuery
FreeLibrary
GetProcAddress
GetCurrentProcess
TerminateProcess
GetModuleFileNameW
CreateFileW
RtlUnwind
SetLastError
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
GetModuleHandleExW
GetStdHandle
WriteFile
ExitProcess
GetCommandLineA
GetCommandLineW
GetFileType
OutputDebugStringW
WriteConsoleW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetStringTypeW
Exports
Exports
Sections
.text Size: 159KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ