Static task
static1
Behavioral task
behavioral1
Sample
RMICHA CHEAT V3.exe
Resource
win10-20240404-en
General
-
Target
240426-zdc8sabf89_pw_infected.zip
-
Size
7.2MB
-
MD5
0256d1c2caff5360a99f6e57d84d1714
-
SHA1
9cdd3f5dd39dd1ee4b4a74f4b60dd262ea4022d3
-
SHA256
3533bb1d5280378525630f776686e689a8f9f278f319055c438577bcc3afa737
-
SHA512
d29ab82fe04a9b4844a386a03ae488c00c9472e9c3ae1fdeafd818aa2aeb22149b3533defa0a431175d67ebfde232dedeb160c83bafb8dfdacad6135a3d9b586
-
SSDEEP
196608:gFdLHTB3dgILJoOJ/R1Fjv+OgfpmmhnM0h:I9tWIFZ5ZVCpFn9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/RMICHA CHEAT V3.exe
Files
-
240426-zdc8sabf89_pw_infected.zip.zip
Password: infected
-
RMICHA CHEAT V3.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
7CH5qIy Size: 227KB - Virtual size: 226KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7CH5qIy Size: 227KB - Virtual size: 226KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 7.0MB - Virtual size: 7.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ