RuuZ.pdb
Static task
static1
Behavioral task
behavioral1
Sample
DOC030222-03022022133454.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
DOC030222-03022022133454.exe
Resource
win10v2004-20240802-en
General
-
Target
f04d67cb7677014fce76d3eb4eb14513f06e968241cb9e02378cd64ddca96c3d.rar
-
Size
506KB
-
MD5
d7be5bbdd4b360ac514c0a7e24af2865
-
SHA1
46fadd8b5d9248f28b0f01c8c4ae5da7fe56303d
-
SHA256
f04d67cb7677014fce76d3eb4eb14513f06e968241cb9e02378cd64ddca96c3d
-
SHA512
7cfb6853e5cf1c52def44224a1a5e241f94b8f0f629c9b0d44663a9e69fbba59a8937de2c93f8945531b5f8b59f7f55e35500234e3c0fce21b71e0247f356dd4
-
SSDEEP
12288:mP4y8vTx8WcERmw/wObKF2B81/ZqVUUY63i+QBKoC9oAk+9xY6Vf:mP4y8rx+E/82B3UL6pQBKF9oiTVf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/DOC030222-03022022133454.exe
Files
-
f04d67cb7677014fce76d3eb4eb14513f06e968241cb9e02378cd64ddca96c3d.rar.rar
-
DOC030222-03022022133454.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 550KB - Virtual size: 549KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ