RIoz.pdb
Static task
static1
Behavioral task
behavioral1
Sample
066beb79d6fc244e4fc3db3cae1af40749798a52f6b5796f14e3612e1498bf73.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
066beb79d6fc244e4fc3db3cae1af40749798a52f6b5796f14e3612e1498bf73.exe
Resource
win10v2004-20240226-en
General
-
Target
066beb79d6fc244e4fc3db3cae1af40749798a52f6b5796f14e3612e1498bf73.exe
-
Size
650KB
-
MD5
876bdd759d990110a2bbd617b0f2c549
-
SHA1
dec55c0273518038e0f2cdabe94d0d33e6fb1704
-
SHA256
066beb79d6fc244e4fc3db3cae1af40749798a52f6b5796f14e3612e1498bf73
-
SHA512
b3f8f1d0cc8a743e907877e699fedf08fe0482aed2d7902a93497d773978bf01d0e78a81341dcd5a6ff0019cfdf43f1cd68d7952dc9f853b2dd2eecc471a23b6
-
SSDEEP
12288:gsJTENl3a+1+UxRhsZzc3LKEUfzPdvpkF55CSuGxCkckJ+ZWsfeXjZ:BxENllxzsZzALKxuHuG7JYWsWXjZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 066beb79d6fc244e4fc3db3cae1af40749798a52f6b5796f14e3612e1498bf73.exe
Files
-
066beb79d6fc244e4fc3db3cae1af40749798a52f6b5796f14e3612e1498bf73.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 646KB - Virtual size: 645KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ