General

  • Target
    2024-01-18_329b8aaea517a511908683b56446db99_revil
  • Size 126KB
  • Sample240118-2jk7pacfc5
  • SHA256 c09c691d40d8b935de4b60c92e1d4fc85f409fb546fd4a5e5b5483ae150fbf20
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Signatures

  • Sodinokibi family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 2024-01-18_329b8aaea517a511908683b56446db99_revil
    .exe 126KB

2024-01-18_329b8aaea517a511908683b56446db99_revil

  • IMPHASH f3d46e2f8717ced6d4b220e65d6ad18a
  • SHA256 c09c691d40d8b935de4b60c92e1d4fc85f409fb546fd4a5e5b5483ae150fbf20
  • MD5 SHA1 SHA512 SSDEEP
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
1
Major OS version
5
Entry point
18563
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths