Static task
static1
Behavioral task
behavioral1
Sample
REVISE_RECBTAAH-PI.exe
Resource
win7-20240729-en
General
-
Target
REVISERECBTAAHPI.EML.PDF.Z
-
Size
605KB
-
MD5
a42b5ab0916804aef234315c76b323bb
-
SHA1
4a211440a29c741eb4b8a24b586280d344b8580b
-
SHA256
87fc7b8785072dab2c9402433c98c2533b2c08ea2eeb1ecc839f13585c8a6f15
-
SHA512
68dc374645568909660e7e2f3337ffa8e39cc262e3d6990ea96b4da54240c8129adb065bf7b27b7812b0ab700583552c1ac7573f55a6ded4c4f03b8538292d0a
-
SSDEEP
12288:hB76LAuwOsqOfv1NE+AK60p+lUzAin1caHh0UkI4UhTEIB6DJRCw4fzPV1WmVRm9:L6LAPOKX15AK60klUX3Hh0U/5gJMzPV0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/REVISE_RECBTAAH-PI.exe
Files
-
REVISERECBTAAHPI.EML.PDF.Z.rar
-
REVISE_RECBTAAH-PI.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 665KB - Virtual size: 665KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ