risepro | 2256-0-0x0000000000D90000-0x000000000134B000-memory[.]dmp | Triage

Sharing

General

Target

2256-0-0x0000000000D90000-0x000000000134B000-memory.dmp
Size

5.7MB
MD5

6128afe5277de19494f7d06384c4a1dd
SHA1

6fd491f3d51e4acbb080cbf1dd21f529da905b90
SHA256

661e1c352563a0ff9312c570c1583a3773cf4356bdbb0d4682dd09cd2fce636f
SHA512

d6d5258f7e35825145806f3cd1d773cde375eccd47ccc1c2b89fcedd54eaa2368b98520d1e2a659f5a364255be27f198e65c33818f53f7827a51782f69501995
SSDEEP

98304:zNmxNkUSdU/ZT29rHIEG2QH9nKpm0/gh4+a9SeuX1lNVzvK3uZwi89S8XNOGlGk9:ckUSdU/J29rHIEG2QHlmjcxX1lNdwibL

Score

10^/10

risepro

Malware Config

Signatures

Risepro family
risepro

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2256-0-0x0000000000D90000-0x000000000134B000-memory.dmp

Files

2256-0-0x0000000000D90000-0x000000000134B000-memory.dmp
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmpMÔ�
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmpMÔ�
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmpMÔ�
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 124KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ