]F/7��&���~��gm��C�qc���,g�ׯIg�I!��\���(��,7��(���,�q_.Z9�<��n�8���A�.n~�Q#t��=2p�7��q�/ *ƅ:Fo��- �dh������,y�N3՜���o��v�|��K'��R�^�]7:C-y6�;#^#C�6��/E�}f�aS�bo;��n�wW˚�~�<�|,|����4��m�F�/F]1�� W�-q�X5u�+x��y1��2.�K)Үڧx�d��T�#�`h���kE�D$�wC�z���/$!w|Y.�Z�"?���օ����T�I��)=�^�"�v����Q����?��/�eli�q�kR`eo�� �'����,�����m��*<Qs+%K=}+�54Sԇ���&J�k<o���O�������Ox�r6韛��~ۊ.���R���-��D���6iHQ-�c������(ѿ �6�~�$�x��֝)XH��H��rj �e�����<�*�kC��/� w��� ��5��n�\�����n���Ve���"��j�:T{���NB���+� �O(��|�2�5���7ﰭ�"�����`Ls1 �����7��h{��A���%%��l ��C��h� A9�c�R�/1e%�@�����̒����v ���/Ѯ� �C�iq�/|�g��?�%����s��_I�}����?z�Kv��%��@h���q���'nP�T`�P6Qv��(d�˰�;z[�l0��*�? Z�#�k��s��t����� ��TR]p�~$���&�E�y�.)d��A�}6��͟g)p����w�W�7�-0���B0N: Z���"�y�_Z�2:~rx��� ��Dz�O��Ux�8��;09��oK҅-��wc8Y�'G���-����nU@��҂�O�����Y٨�re���ya5�-�a��b����v&1�,N/�8ȋe:�懨̴ FG����y�w��{���@�J��y���ێo�j?8��iUR�s���5�y�9���%��8���mro"��)?��Ξf %<6��N�����IA&c�1O�F�?�)�3n�������~H��9l��m�00~q!�Œ팱}��4�voӞ�&���j=j3z�!D�X��?pM�3Bs��0��^�v5I����8�罺���r�|�IU��$�sPwxj���cZ��H�����W'�_5�5٫��;�\���5��%��2�dݬ-n :Q� {�����DmР0�����Y]��s���=<�qƐ�^Ho����n�I��@�=�ð�F�c��t�1S���˂^�h��g��5&7�,�*�&Mݸh}��;sX�����y�@�Ţba�I5l&���E鋑v2z�=��A��L����E�'Hb��O�%2���̨�y���$A�ﴂ0D*��W.ێ�W��!Sd�k=�PA������p��>�)�Um��?�@���J�)^���J�������M��X ]fۗ�1B��������cR����b�Hb}^�X�Z��삹�b {��X��,���ɉ�l����v�U$�|�a���JQ�f|{p�������F�KU)�M���2�9w�Bnf�#+��ګ�i���4h�����ݎ�n�i��Íkģ4=�~�u��bv��H�ӫݯQ��A���꘥[����Ԏ�V]tKj�a����c9�HNX{D$�;GI\�4?��uXS�Ż���2o����%�>���Q��~ Ui��@?�` �BX%�YY��gG��G�q�sv�#:��h���m���c"� �Ϸ7�:��lKb��-����.6��-���K��-C+�K�9ʤ�-<}s�c���&iD�:�-�l�+�Bn����X�m������������(u�E�4`p�>�p��G�Z��!���G�sXGRS纇h9A�6E\i����N�]�1�0�5~�N����V�A$-�234�c�X@�/�����u�Ԩ��t%>DU��0^|ˍ�V�8봍&����<FAN�%=$w�?R�����$�h�:�MG�c�̥���A�,8N8�Y��W��բ�(ޅ���W���=O�*[�*Ƿ<5�g��9D��3�K�z�(uߧs�FR~�[�_����u2Y3�Q�eQT �馾��S��?�zm*���8L#Bkgǣ�[1_1�"둊�r̙Џ�Q��W� ��r�tY�C�s�S�M��1���y3n���e6�6� �����Hv ��Yw�PV��k��d#=�^��X�*e� Z�a &z;j����s4����"G ��~`&Մ�b�����-�:��_U�)���rF�{�_�������;8YA�ٳ:��(;��q� ���֞���_�?Z � �,B����ʃ;���A]����5���FNfw���� � ">�uR^��gH�4�=>�a��݀�u����8���R�3/ ���Mq����C��b��Yᶞ���ƴ�>�Bd�,��|�fz��e� �^j��B�mi6I�4�^�b#)Պ�9��<ݔ�� Bw[2C[p�+����>�xƓg��z�)�k��Y�QVI�O�e�A��>�� { o@$�lU�Ƭ�_���clA�b}m�l=��( Ǟ�FOUO��P�V��>G�؞ӄ��m[a���^mId���� ѕ8���C�/)/�9o3v?'�'�Q�EZ��6�e�d��8���p�N�� 't�djL�`/u<���f�z:*�^�۪w�!ҩ�H�#N�p�J�u��NF�Ձ����%��R�"��Eꢌֳ�Q�!7*\X�S@yUtm.�<��6�a��!�"����$���'o���;����[4eh���?��p,�Dg�!sBF�����P���w ��Cś�p� z\[6�s�)&E���^�M���or�ԥ5��-g�Bɵb��:}($� &�c�������Xbry�~Oؗ�}~`��������!��k)�&��e� q���e;�+Q���N�%*�1���qRekW�<��m&���+q;.��b��p�+G)M�>����]��-C��A���ɇ��Q�V�� ;��]-�_�C��hp �t(h�-��)ݢF���*_��a*�aP��&��6�Auf#��(p.e����Jx'Y�%��&_���d
Static task
static1
Behavioral task
behavioral1
Sample
Rapihuyet.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Rapihuyet.exe
Resource
win10v2004-20240802-en
General
-
Target
Rapihuyet.exe
-
Size
7.3MB
-
MD5
dd2bcc0383926ea822c841a2f8c0bf9f
-
SHA1
e04373bdbd49f223ca52b4db4926337cd3a0eff9
-
SHA256
5971e773c29143d5c6c5a3af21f5d2b50c0c592b5780d62f60aea54acabfc6c8
-
SHA512
8739fc04fe2afac4709a30be14caa356a32329214514080ee339c39323c10d727a52b39f343463aebabcb9f7ec98a97e2f5a5b7860f4c3852ee0a03cb38b13c8
-
SSDEEP
196608:VaM0if0/Yn4TuHXevE5BNWKOleB4iP6U0vCYR/z:L0if0y4TU3BNWblA76tz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Rapihuyet.exe
Files
-
Rapihuyet.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 2.9MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1.7MB - Virtual size: 11.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE