Static task
static1
Behavioral task
behavioral1
Sample
AccountReaper.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
AccountReaper.exe
Resource
win10v2004-20240508-en
General
-
Target
AccountReaper.exe
-
Size
12.2MB
-
MD5
8902db3e81e7e7f51cfc0d3442512059
-
SHA1
c3d2dcfe0452ae993eafd3766a7d64c27e863a34
-
SHA256
82dc71bd67f2069562e7ca2ce9741c70d2a21594775fdbff7bd988cf0f6852fd
-
SHA512
24c4bd3fc1186e52ce03db1f8bdc6163dbc0e925e03988d8bff4c564b875eee1d2030482b731c9d4250f448256cad2304e5caa063073c00701a1ccd1d0997519
-
SSDEEP
12288:PLRs1UwG9YQPa9annaMg6gScK/JN0G20VFF1eO3nmHtKu8ViFm3UPBlCajQxu4TV:DR2bQy9IAzK/EGFVFF1e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource AccountReaper.exe
Files
-
AccountReaper.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 12.2MB - Virtual size: 12.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ