Static task
static1
General
-
Target
RL.exe
-
Size
5.2MB
-
MD5
9a3a4d33d905a64b2e116d7d0bd3dc92
-
SHA1
8ffb1ddce1ffa8575b9d7c8a6605edf2f77d64f2
-
SHA256
3b959e2de3c7871bf8ab4a5866b937f8c9406fcd2975eedf2ea3e6db1a3a0085
-
SHA512
02eac5a8add6c6c7b4a23e413227a011595ed7a2f857aceb48c17b731c61d1c4a2223ada1aa4f5381168a1b9f58816c20d79404c1e26bc4be78d4b327e31c34e
-
SSDEEP
49152:GoVV1BCjBYkwwpim9dWWRh3c8VV1BCjBjdWWRh3akwwpCmk:VDH6j041l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource RL.exe
Files
-
RL.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 5.2MB - Virtual size: 5.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ