Behavioral task
behavioral1
Sample
razorVirus_Builder/razorVirus Builder.exe
Resource
win11-20240426-en
General
-
Target
rat.zip
-
Size
957KB
-
MD5
a070dd24d7b7bee251ea879ef62c0c8f
-
SHA1
e55752e3d35be34ef83d1f8d5af37588277dee29
-
SHA256
36a942d721f304c1391d228efa54d28ff119a74af5fc75c0a7b97e84839a05e7
-
SHA512
31baeabeb9d85720cb196509fec8917c1213793d07b8bd14d1555043deca48f8ef30e42456ac28edbcf3020b77e64dd32b68cd04760344933bf9a7698ad5f832
-
SSDEEP
24576:uGbJQX09D/Fhj7WR2DOQcAj6g54LT9Jp6FLqxs2nH44Y8O:xVQkpFtg21c4754nGqxw1p
Malware Config
Signatures
-
resource yara_rule static1/unpack001/razorVirus_Builder/razorVirus Builder.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/razorVirus_Builder/razorVirus Builder.exe
Files
-
rat.zip.zip
-
razorVirus_Builder/razorVirus Builder.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 620KB - Virtual size: 624KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE