Static task
static1
Behavioral task
behavioral1
Sample
ratnik.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ratnik.exe
Resource
win10v2004-20240709-en
General
-
Target
ratnik.exe
-
Size
6.8MB
-
MD5
e36928f67d99acc590d17f24fba56ca9
-
SHA1
8bfaaa87f1a1385830605526f808fd706e915233
-
SHA256
d25ba37137f257df994970abc1eb3c32a9dce6c085e2cc62f815c92498a38dcf
-
SHA512
c7483b86667167ad8c440accb1286ec6d16a6bdc6bbcc97a5933f20a5c686de5f56381f1f398e90e886dc1186205b91f42ec4cfab7df1c809e3f11c24ac7ba02
-
SSDEEP
98304:9GhdxW+CVGU1sgM+K8Hf5veW8tBZ2PWG3dqFh3gMADK2SLAlIJZRGRGKGnBckRw/:9kYreFBZmn3d+j2S5JqRGJzL26+iu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ratnik.exe
Files
-
ratnik.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 6.8MB - Virtual size: 6.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ