Static task
static1
Behavioral task
behavioral1
Sample
Rendeles_042024,jpg.scr
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Rendeles_042024,jpg.scr
Resource
win10v2004-20240419-en
General
-
Target
5c44b828cb37587d42a3d7be786cc8ce05a13598ea37b2d9359036518bc72777
-
Size
1.2MB
-
MD5
2b52ca824766f569a09064c59c85b423
-
SHA1
f299be8c26af4b02f0f53fdef056275b02b6661c
-
SHA256
5c44b828cb37587d42a3d7be786cc8ce05a13598ea37b2d9359036518bc72777
-
SHA512
935ca49a8b2de001048ebe57522ab49f0b8699c01ddd52e7c1685150046d31b21dad10124347b3ee9ce20fd495f90332d300b7f8c251f7440e4030e2e0c68de1
-
SSDEEP
24576:nBLuA8OzgVub4arqVzZ9o3OXRlBNYP1hhuBMCQb:nUyUWZrEZ9o+jByPXiMC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Rendeles_042024,jpg.scr
Files
-
5c44b828cb37587d42a3d7be786cc8ce05a13598ea37b2d9359036518bc72777.iso
-
out.iso.iso
-
Rendeles_042024,jpg.scr.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 718KB - Virtual size: 717KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ