Static task
static1
Behavioral task
behavioral1
Sample
ReksFN_Launcher.exe
Resource
win10-20231023-en
General
-
Target
ReksFN_Launcher.exe
-
Size
6.4MB
-
MD5
932f7870d11a6b043a52061d15501a14
-
SHA1
334e49517cae3464cfeeae59422cdefcbc22a205
-
SHA256
2428f2d4d82bcd68303c61cd5585344a4ce13311bee819e9f9023b32f07e3cde
-
SHA512
b838d9b5d808e970514de7f9c45f968df324ffb8da3745d7fdc3827248d40fd92f6e96723bdd3ffd5ade7090d75386960f14236aab46fa0c65375e233f9c603b
-
SSDEEP
98304:BHQLjYWlLaioEWdVr6nSCoOUonbUwUWvk0IY2bp+MS4EnOicpwG:BwLjYGOJtdd2SCozonbUycE2bpc4EO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ReksFN_Launcher.exe
Files
-
ReksFN_Launcher.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 6.3MB - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 133KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ