Static task
static1
Behavioral task
behavioral1
Sample
RustAnticheat.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
RustAnticheat.exe
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
RustAnticheat.exe
Resource
win10v2004-20240910-en
General
-
Target
RustAnticheat.rar
-
Size
1.1MB
-
MD5
fc6d0e5a74f377ac0d58c1b1088d57ce
-
SHA1
16b81a3e0a59b42d710b42220107f8e066ff9e72
-
SHA256
8ba594fa7b1cc9bdc5fba532d40d6ed7bf291973e911c4be96cfc288b3554910
-
SHA512
d72f37e17e23971e66b669235fb03c29c32171e4144987207c91109b8bf7dce844dbf25133fcaf325f2a8d9b2c44b3f99410eee98de736a03c078693d1d75030
-
SSDEEP
24576:sZrjK1usvLJyBxT4xdjYvYabIEQ+FRKdLB7vU7U7GBWTwq+u1L0SX0I:GrjKdArTkCwaIe07Q7c5Two10/I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/RustAnticheat.exe
Files
-
RustAnticheat.rar.rar
Password: CLAN-DSD
-
RustAnticheat.exe.exe windows:4 windows x86 arch:x86
Password: CLAN-DSD
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ