Rabbit2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Rabbit2.exe
Size

911KB
MD5

a29710fbe2a76a28744c4e44192a3549
SHA1

5b8d696025942290624651d56e5876f63796ebcb
SHA256

b88e8f464dfe8ea0ebfcae512405da7608b6bbd34f8999f49068e9bf37e64ee2
SHA512

a5b2eb9e0764e2d6ab287e0d87634e73d9090664146b7a53d3aa08bbc4e4c6cdecf73aa2194a2580c66e56bfb4b1cb6291a04fc8a9dad2e9cdab3ebf61ded138
SSDEEP

12288:nLuQZ9tGmWYD6ja5ckzYiHuq9o9wO+5HBXUzsQJATRF2eQ9Cal59RQxX:n6QTtEYD67aQd+9JUwQ6E9CK9aX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Rabbit2.exe

Files

Rabbit2.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 756KB - Virtual size: 756KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2.5MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ