Static task
static1
Behavioral task
behavioral1
Sample
RL Checker Version 0.2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
RL Checker Version 0.2.exe
Resource
win10v2004-20240611-en
General
-
Target
RL Checker Version 0.2.exe
-
Size
226KB
-
MD5
bd69c5bcaf1fe70b8ffaf8b231a4244c
-
SHA1
adec62ca8128f6f70ed120aac2a95c19f4c1b2f7
-
SHA256
7a9f415efe1d0c60135bbd3f126c2d2eb571cd073d4dc68f25fa7e915ddf001c
-
SHA512
efb3e1bfd249a1763c3714e99323d346e251a63cafb47ecebeb42ec706c6540f82879f82039ac2dd101c0676dca69e93e576a55c75e530ca83708636a7102ef0
-
SSDEEP
3072:oi/vFy6gfFo0y/vkYhwMf113/mGOKdXonqav9suxQI+1qXahU:5MbY313/mlK29su0U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource RL Checker Version 0.2.exe
Files
-
RL Checker Version 0.2.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 174KB - Virtual size: 174KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ