Static task
static1
Behavioral task
behavioral1
Sample
R2RCERTEST.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
R2RCERTEST.exe
Resource
win10v2004-20240226-en
General
-
Target
R2RCERTEST.exe
-
Size
15KB
-
MD5
3300094d1ce825bb9c08ab40a123e8ed
-
SHA1
2f8efb0fa20fed8104eab0cc8b3c2771c97e5b67
-
SHA256
c7142fc351a4d2ee9d1e7e1a394d7b323f966f5f6e082feadb812525058d4319
-
SHA512
9489e787c5344f82fcaa6a27f4761962403f96d1f4406b42301cf7ac2163453c0605f33466bdeea87b3a86a356497407c423f0a3449916f73a7b626dc5ba009d
-
SSDEEP
384:DYIIq01gHwHLU9SP64NySkhIqDcg4eCvdg:Dl1YY9y6qLkcguK
Malware Config
Signatures
Files
-
R2RCERTEST.exe.exe windows:6 windows x86 arch:x86
5965358772499716a4271c08f77faf9f
Code Sign
5d:cf:24:38:e8:d7:a4:5d:b2:fe:5f:82:fc:86:ed:32Certificate
IssuerCN=R2RCANot Before31/12/2020, 15:00Not After30/12/2099, 15:00SubjectCN=R2R,O=R2R,C=JP50:6f:12:2f:03:c2:e1:0e:69:65:78:c9:e8:ff:1c:d5:59:7c:1e:44:18:ba:b0:3b:61:1d:c2:af:dc:25:b0:e5:4a:4c:8b:8b:38:cc:99:bd:1d:36:79:07:4e:b7:2f:5e:8d:6b:53:1f:6c:cc:6e:c5:09:43:6a:47:cd:46:82:baSigner
Actual PE Digest50:6f:12:2f:03:c2:e1:0e:69:65:78:c9:e8:ff:1c:d5:59:7c:1e:44:18:ba:b0:3b:61:1d:c2:af:dc:25:b0:e5:4a:4c:8b:8b:38:cc:99:bd:1d:36:79:07:4e:b7:2f:5e:8d:6b:53:1f:6c:cc:6e:c5:09:43:6a:47:cd:46:82:baDigest Algorithmsha512PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
ExitProcess
user32
MessageBoxA
wintrust
WinVerifyTrustEx
Sections
.text Size: 512B - Virtual size: 218B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 670B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ