risepro | 2360-22-0x0000000000400000-0x000000000059C000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2360-22-0x0000000000400000-0x000000000059C000-memory.dmp
Size

1.6MB
MD5

dffe9728cd8e122ba563d5f4b84ea0a6
SHA1

ffff045beeb1061406d69c87f523b5ad00db08ea
SHA256

c3b2aa142e528d715051e502b807f06fd9cf1a3cd2cab9c5a512218311261382
SHA512

d6c3545286ba1402705714dfa37490d6b8645006670232e1adf7883a4d2f75c32ef77f09b409f66ba2c96177cce817692951a310b59bd277880a54ee42176660
SSDEEP

49152:TVTBGQcbvUDNbQ9jyA/gZd0x0Oj1o00pT:TVwQWvUDNbQ92AoZd0x0ORo

Score

10^/10

risepro

Malware Config

Signatures

Risepro family
risepro

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2360-22-0x0000000000400000-0x000000000059C000-memory.dmp

Files

2360-22-0x0000000000400000-0x000000000059C000-memory.dmp
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 159KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ