Static task
static1
Behavioral task
behavioral1
Sample
r.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
r.exe
Resource
win10v2004-20240802-en
General
-
Target
r.exe
-
Size
33KB
-
MD5
a0521cb21513aae577f60826e3c6ce2c
-
SHA1
4ed412cfbba284fd634aaef6c5b703a2567c55e9
-
SHA256
ef72ccfe89c55bbe4307ebcf6865b7787115edd95f83736d618cc52b5a90d96b
-
SHA512
ff3c5e86dafbc8e745bb655e757357f27057c8abd6484f8327a96a033aa1ab725cf1b1926a6e701627f0b35e011cf90a1deefa5de7dcef58f51c4c3d0132e7a9
-
SSDEEP
384:ABwkWUwExmt2FNBVVc3Z4kohoPBHheEGdtdsnwV1DhbJgk36Obapr4q8Zw3ExzSm:C0tAjVc38hoLerYwVJR6Mz1QB6SdMV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource r.exe
Files
-
r.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ