Static task
static1
Behavioral task
behavioral1
Sample
Rcn.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Rcn.exe
Resource
win10v2004-20240910-en
General
-
Target
9d083802e3b1ef67d7588de950192c1619cb4f55c49846b4401d1b6ec240b0e0.rar
-
Size
1.6MB
-
MD5
a77cd8992525e3c457a7534ead2f367c
-
SHA1
b5498c82e76356c25195860973c2fe2db5c602ea
-
SHA256
9d083802e3b1ef67d7588de950192c1619cb4f55c49846b4401d1b6ec240b0e0
-
SHA512
7445fc722fe9a301125f150e599b823a8e569069602d746adc90c1c5387eb6f434b8d391102c13d0841f6110663353f879d8d4daac29db872d9870681d808ebd
-
SSDEEP
24576:sIe4tFYAYjl8ASpCGBIcVuK58oUGsxLGNtGBc1aLOaEpptuVBP43JU9dqNl+33S+:swYH8nAKRuVGSJClptujgKXqNl+nzL1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Rcn.exe
Files
-
9d083802e3b1ef67d7588de950192c1619cb4f55c49846b4401d1b6ec240b0e0.rar.rar
-
SEPA 2024 - 09 - 11 CH002112055003 PDF.iso.iso
-
Rcn.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ