Static task
static1
General
-
Target
RYOD.rar
-
Size
4.4MB
-
MD5
602804766f0fb1ee0f40ac0c84d3d614
-
SHA1
dec1d057a614513822fceba6291163b5904f738b
-
SHA256
67d33ff5cf22673ded917102918299d320635701366c0453f8f660c0c5efce72
-
SHA512
cc22bc3a45dbf730d9d4689b5d2167b90d1ce8af4d03ff1658c222a1858cf7baa95ba2ae263369c102ed15b0027669e42abad0f6c509937263698c1055bd4620
-
SSDEEP
98304:rkIPUXeByFuksD1RgqyFSQpIPxvUWHXPvzE8eL/LA5HJLhPZny:rkIP5BMiRxW3pIJ1fvzxe/A5HthPZy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/RYOD/RYOD.exe
Files
-
RYOD.rar.rar
Password: 11
-
RYOD/RYOD.exe.exe windows:4 windows x64 arch:x64
Password: 11
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
L[w\b`@ Size: 460KB - Virtual size: 459KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
L[w\b`@ Size: 460KB - Virtual size: 459KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
olImmrLT Size: 512B - Virtual size: 22B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.???? Size: 512B - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ