D:\X-Ware (4)\X-Ware\X-Ware\obj\x64\Release\Ro-Astral.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Ro-Astral.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
Ro-Astral.exe
Resource
win10v2004-20240508-en
General
-
Target
Ro-Astral.exe
-
Size
275KB
-
MD5
5b6fc1f6e945c8d18280485ad087b91c
-
SHA1
d784576489521ab54274ab8916d5c4e24d499306
-
SHA256
a977ece3673296fc116f1772dde34bbcba24c0b5d797833d639988ea13802d89
-
SHA512
e4b0bd9f3f9b2921ed56309808f8d78dfdab923058e88c7d167066a3c60c03e43677d9b19a36a919ba719bb28c7d83a07a1a9f2d0f6db53cf4f6d268ea2f0b69
-
SSDEEP
6144:L1RLbZF2kM1xajrm42w4ZbnCXezvODHEi1nzRdDvh12zRdDvzgNHusdb8zEi6U4z:L1RLbZF2kM1xajrm42w2yDHEipvh1svM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Ro-Astral.exe
Files
-
Ro-Astral.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ