Static task
static1
Behavioral task
behavioral1
Sample
RustAnticheat.exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
RustAnticheat.exe
Resource
win7-20240903-en
Behavioral task
behavioral3
Sample
RustAnticheat.exe
Resource
win10v2004-20240802-en
General
-
Target
RustAnticheat.exe
-
Size
1.1MB
-
MD5
84e9631aef9d0342cae8466ed841ca7f
-
SHA1
fed84e7f25bb9f337a99e820111e87be1de954aa
-
SHA256
b929ede4c76d1db2d2b1698d401d658fbce5e440fd54f4071701aae69ed791e9
-
SHA512
9fd3bf2966edb0ae54a9a46ded59fde75e6c7653078a5cac3563333a0f3ee1c197cfd622c2828855aacbc2023ff85f3d37a01dcb360a0b611aa1a43d59cdd36b
-
SSDEEP
24576:y1zV1C+mn91Bm1uyv43wswHTFZp/qg0GsO0iT7puGB:uh0I0yIYzFZ90Gstw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource RustAnticheat.exe
Files
-
RustAnticheat.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ