Static task
static1
Behavioral task
behavioral1
Sample
runtime.exe
Resource
win11-20240611-en
General
-
Target
runtime.exe
-
Size
2.6MB
-
MD5
f8d81ffe484dbbaf07da763a383ef1ff
-
SHA1
fc026915467feca3fd6bafbad9fe40715e4a7a6e
-
SHA256
e7602a6b65b61441472ea3dba2b235d89a030698832c10d3413aaf8e858c98a7
-
SHA512
86da408c5f3e73515ed8916716db0f7ca25dee3475a70cdc42f62fbe04c5e05fcef5a83906675edd6626e9e35216f7a74b9b6f5cb86d8715bb5c7af3f72cdd1e
-
SSDEEP
49152:ethO+/LVMIc1JWcS1I5uxOIRzdswkUMhdwcdKgtgx5TeCk:et0+BMtndSm5BUs8MLKgtg5rk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource runtime.exe
Files
-
runtime.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ