Static task
static1
Behavioral task
behavioral1
Sample
CustomRP.exe
Resource
win10-20240221-en
General
-
Target
CustomRP.exe
-
Size
6.5MB
-
MD5
8617a16375cf69ebb784c8d8474e312d
-
SHA1
19fcea4005a9a7b7fe86aa61e1d873abc3f09c0e
-
SHA256
a9689c14b7b403246a47a8062e692057fd409207f997911be460179d33e68e74
-
SHA512
4a00eebef427ff28ef2a1152ab758b0359152e88aea43930d1b9e58a4a83bfe8460a651a9688f55a9592f373ef00a532dfecf48d988605b278ecbcb3d1db9a04
-
SSDEEP
196608:5mci4xQ81Y4AIBqxfOxlNbyJl1eO5KtTHCx7h:hnxQQY4AHsxl0JTeOot
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource CustomRP.exe
Files
-
CustomRP.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6.3MB - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 208KB - Virtual size: 205KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ