REvil Rat v8[.]0 Beta[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

REvil Rat v8.0 Beta.rar
Size

493KB
MD5

ba4f3f55918de6b489b93010fe4a97de
SHA1

5cfe783de0d3c7fcb62d678aed29c84d10554f8a
SHA256

c6a6c821f67e0d3ae6a780b96b16329b2a7a603858d5371e7e9d9c9570fa0ad9
SHA512

92ebd70efe9fade31abe50fe41cf254f5575855acf713a5c38f425a45d01fe42d2117205f2510ebf2d8b57d88947f8eaa908897fd9f8a9f5bbe79e37cad67405
SSDEEP

12288:yKkfWNadOUWMKnhO+D8MgYDOLbvtYPGcpEDdaWLtnfrMkpEf:yKUMHMKhOZtLbcpEAGtnfb+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/REvil Rat v8.0 Beta.exe

Files

REvil Rat v8.0 Beta.rar
.rar

Password: 1
REvil Rat v8.0 Beta.exe
.exe windows:4 windows x86 arch:x86

Password: 1

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ