Static task
static1
General
-
Target
RugbugRedfern-Skinwalkers-2.0.1.zip
-
Size
112KB
-
MD5
00c4972f80f7e1970e2266370f3618c7
-
SHA1
eb42de7e65eecb7429d68e3e9526b126accffc06
-
SHA256
711218cdf7cc089c83399dc636dba17cda08711b0cd5f7a03e6b913fd49535ee
-
SHA512
3f1d42d68f729d4d52c79ea1d9b86c60b09021850f5d6a23d93d12fa7fee39c4e2dfb68a863b29c67cd9eb311388d2a52d1f304868f0128dc78f0c03af4339ac
-
SSDEEP
3072:sj3ZV+MugbD72CoTY3cyNBvcDCKAEDN1OTOsH+Q:sj3azd+bvcDCWGTO2n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/BepInEx/plugins/SkinwalkerMod.dll
Files
-
RugbugRedfern-Skinwalkers-2.0.1.zip.zip
-
BepInEx/plugins/SkinwalkerMod.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
README.md
-
icon.png.png
-
manifest.json