Behavioral task
behavioral1
Sample
708b32f7fdd8389d40c12d2dea41947f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
708b32f7fdd8389d40c12d2dea41947f.exe
Resource
win10v2004-20231222-en
General
-
Target
708b32f7fdd8389d40c12d2dea41947f
-
Size
154KB
-
MD5
708b32f7fdd8389d40c12d2dea41947f
-
SHA1
3be57b22b14f2a4acbad9443adf4c61aab2fdaa7
-
SHA256
143b0009ea9033a8634a40e0947683ed00e9e85dcbec4cf23a18a76cc961b33e
-
SHA512
bf3acdf781691f5ceab957f1f876705628239c350ec2e1490f0eaa781492959950139a3cb86532ffa041622747b797b99a26e640d6b08d999213ee8731b49fbb
-
SSDEEP
3072:OUBvKNt2/nZKHLYl7XX6rLrPrkrp/prIPLCrLLLLLLLLLLLLLLLLLLLLLLLLLCLH:OUBvKNsl7XX6rLrPrkrp/prIPLCrLLLI
Malware Config
Signatures
-
RevengeRat Executable 1 IoCs
resource yara_rule sample revengerat -
Revengerat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 708b32f7fdd8389d40c12d2dea41947f
Files
-
708b32f7fdd8389d40c12d2dea41947f.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 226B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ