RC7REMAKE.zip
- SHA256 72bac03af174ee89572aad67b9172a00db3d97dde07a3a64234174d407763713
Static task
static1
1 signatures
General
- Target RC7REMAKE.zip
- Size 16KB
- Sample240716-b3z7vasbjh
- SHA256 72bac03af174ee89572aad67b9172a00db3d97dde07a3a64234174d407763713
- MD5 29a911373c92764bbee2ea328508f6d1
- SHA1 de0c5939bf34196b42287a34e90f9b10eedeb596
- SHA512 3ab2b4b90eadfed95552006916e3dd975ab7615151df6668e426ee22ddc66889129260df0572d2de2ca97d40811d64e2cf8a958b4f824d0a1df0d0dccf2298c3
- SSDEEP 384:oV6eLa1udPe5Ft7S1R0RN/GuTSRY8cXrtA/GoNzz:IkYPgt76RsgCQIrWHz
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/RC7 Remake.exe unpack001/STAPI.dll
File Explorer
-
RC7REMAKE.zip.zip 16KB
-
RC7 Remake.exe.exe 10KB
-
STAPI.dll.dll 25KB
RC7 Remake.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 c3d184902b66c97aa232063e6fd8b90c95ad4788056d71a20755956338f44b40
- MD5 02827dc8e8a249bebe20d7d179fb4d16
- SHA1 d8558b1a551bd247233a3fcaaf347c4bc6541065
- SHA512 313ef0cab18c0f4c5403c6491c78514fe207ba09acc9b76151ec1bf9f0305c5f912d2deb38c326d647f3d064c61982330b6744784c529de08795ebc0f5d82c15
- SSDEEP 192:Tv5xuwDy3wxQQxvfYNozXccY7V5EpV2QaHjjVghWYVd8fiUN:b5xANoIcEEpV2QaH3VuWYVafiU
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15666
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\sharm\source\repos\RC7 Remake\obj\Debug\RC7 Remake.pdb
mscoree
_CorExeMain
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
STAPI.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 48cf62c11ab607f5eb413b683860b227a596e72f030dd671bccf3cab568c9803
- MD5 9d531a513b01a87a1f9a807a651ec6c2
- SHA1 167a8a5b8a4781ffce9501fbf940001f94139b07
- SHA512 be81fe19d2acf7f8b34d1c230c8abd140ff3e4fa06c13555db38806d1760bd517c9ec80ba58cc5f053ad789868f5d07b9878d6f3188ba1bec154ee7266f88614
- SSDEEP 384:PD39f1l7fgyJs/BmoIJgm3/BmoI0BG+9mEaoCOepbyPa69a+5TfCCJi1XowRV39g:PDtf1lsyJy+9Oo5epbIr9lk5RRL2
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
30946
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\White Cat\source\repos\STAPI\STAPI\obj\Release\STAPI.pdb
mscoree
_CorDllMain
Name
.text
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
856B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ