Behavioral task
behavioral1
Sample
2816-29-0x0000000002AF0000-0x0000000002AFA000-memory.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2816-29-0x0000000002AF0000-0x0000000002AFA000-memory.exe
Resource
win10v2004-20241007-en
General
-
Target
2816-29-0x0000000002AF0000-0x0000000002AFA000-memory.dmp
-
Size
40KB
-
MD5
45158a41936e0e2ad90271d4c860470c
-
SHA1
b73b5a6cd70bd7fad3fec9cf228d1aaeb4a02a8b
-
SHA256
2c5737a767c4de110d2a0be2db2b2f71e86107eb0d312525baccbdb63b339861
-
SHA512
f0876428a36ca8f865734b874360d13ec3695594f3d5d87bece592627dab1402eb38859b45d59aa0d72e80d0914af781629dc205d41c813d9531d4661bddeb6c
-
SSDEEP
192:F+8C+EKS0O9ejYTDG8bcp4LlSEenieXubWyD9JEBkGxVXtqoN2RJ0:FNVjYTDG8gpWdeXTyD3EnxOoNd
Malware Config
Extracted
revengerat
NyanCatRevenge
54.146.241.16:5222
f9796de67e
Signatures
-
Revengerat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2816-29-0x0000000002AF0000-0x0000000002AFA000-memory.dmp
Files
-
2816-29-0x0000000002AF0000-0x0000000002AFA000-memory.dmp.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ