RuuZ.pdb
Static task
static1
Behavioral task
behavioral1
Sample
DOC030222-03022022133454.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
DOC030222-03022022133454.exe
Resource
win10v2004-20240802-en
General
-
Target
d7be5bbdd4b360ac514c0a7e24af2865.bin
-
Size
502KB
-
MD5
4f747bc3a874bb199252abbb1fc5cb9e
-
SHA1
5b84bfd1d456111b6091d89f6e3abba9b17c297d
-
SHA256
84e981533ba050914811f5018ad09a233283645117940a9c7d509085d7c13f71
-
SHA512
29be3ecb430ad13c352b19ab5842e3836f43600c64138e38323d4e8eb0469fc3c1f80716dba16cd55d0edcd12de714f6d17f3d8d078c6e7fee593fc64e2d29b3
-
SSDEEP
12288:Dj520SK1fFFC4rq66QokLfYxE5hxC8K2dvn2g0DwNfHV:vfFFC4m9kP3K8Tl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/DOC030222-03022022133454.exe
Files
-
d7be5bbdd4b360ac514c0a7e24af2865.bin.zip
Password: infected
-
f04d67cb7677014fce76d3eb4eb14513f06e968241cb9e02378cd64ddca96c3d.rar.rar
Password: infected
-
DOC030222-03022022133454.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 550KB - Virtual size: 549KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ