Static task
static1
Behavioral task
behavioral1
Sample
RyxzInternal.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
RyxzInternal.exe
Resource
win10v2004-20240802-en
General
-
Target
RyxzInternal.exe
-
Size
27KB
-
MD5
7ccf518c814f8421e4811a2560fa8198
-
SHA1
94e1d7fae67b9271e2d9ed1214f7062a54bf924a
-
SHA256
ff50ad633480c29044fd6c60c8110ea04890e1555badfc3d994a59e85b0d7870
-
SHA512
efc7660ea07872ba35a7a5a6c555b1be1f3b0fcc8877ed64d398e4aa6e5475452c3e653274e28463fbb8f89fe2276b5aaa5753be7b66d57853f6dd775532b0de
-
SSDEEP
384:mgpsg/nOsa0AOvlrHw72q71NSsfTW+lYyz0vxgxgVujObPPxsmncYjMDVZ:mgRWsa0tK72q7nLuy4vyPYncY4Dj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource RyxzInternal.exe
Files
-
RyxzInternal.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ