revengerat | 8698beb39476bfa3dcd76b7a487844c8[.]exe

resource
8698beb39476bfa3dcd76b7a487844c8.exe

8698beb39476bfa3dcd76b7a487844c8.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 8df32e8825212ac35a04f7cf0c408635e4631579182147a2f5378f88162128fe
MD5 8698beb39476bfa3dcd76b7a487844c8
SHA1 bdda76b09161ec339874175ebd19be7870b56e5c
SHA512 e9c73d9092439de3b911ce7faca16d34ee37f5d2639b3cb78078b1387942e8cdcce94595f44c65765b03840e8baba851b61d4a16acbea88aeab75a4fafb69faf
SSDEEP 384:tNVjYTDG8gpF+aeXTyD3EnxuoNhv4+LzDDG0feb/:tPSYGyjSTdDPeb
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

20478

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

.reloc

SHA256 7830cf1bf36f348cf4ddd85014bc82bc05d382d0fc2a48dea45c69e412b35586
MD5 5fef36d8ff5ec0905259494b4aa71501
SHA1 1024b49d545b0d1db8c91d9d979733c31e855015
SHA512 dc846763e5c3a77e4603fae6a14e5b18640b06f4a33df49178a39a41f732f9b4fc1ad0c0f7c6545c9854f0a5e4f7b68a137851eaf58610b0ddbd2bbc129dc1a1
MD5 SHA1 SHA512

.rsrc/0/version.txt

SHA256 9ae9efde74c9beb237972fe6c568cacf91b4ef05cb81e565c027e97933d5f4e9
MD5 4e41398cdc5baa8ae4d997d842276126
SHA1 c400c64dbec6571e5afbec9f462c05edadb1ddbc
SHA512 6ddfe1dcd85449afdd6ff1429528e1ae541f1dbf98832dc2050a040a90cfbd22d1a1847e2dd84df8bf99b98da73bdaa1d54c0f6095d99be503745aaf94f0ee35
MD5 SHA1 SHA512

.rsrc/1033/DIALOG/105

SHA256 fecdb955f8d7f1c219ff8167f90b64f3cb52e53337494577ff73c0ac1dafcd96
MD5 3409f314895161597f3c395cc5f65525
SHA1 1a99d016d65e567f24449d9362afb6ac44006d0b
SHA512 f3e7394fa49325a7ea46728b77a5e819e18d63049d54c6adf36d08619709484f8bbd20206416d3c1440bd70632d99d9a45f3488482353f90aa21aa6ee3915427
MD5 SHA1 SHA512

.rsrc/1033/DIALOG/106

SHA256 69897c784f1491eb3024b0d52c2897196a2e245974497fda1915db5fefcf8729
MD5 2d12c45dc2c029044aaff357141cb900
SHA1 083db861ab3c7db23c6257878296e73a89a74b8b
SHA512 a50dcf605a914f0a6f94b3f815be159c2b729d005a25d6cc9120c4d34445cae2d0b20df3dbdc7672f316010c6a47079265548a1ed5a523896963b1a3ddf98a17
MD5 SHA1 SHA512

.rsrc/1033/DIALOG/111

SHA256 85025c8556952f6a651c2468c8a0d58853b0ba482be9ad5cd3060f216540dfc0
MD5 6be4e1387d369cf86e68eacbdd0e81dd
SHA1 351970fe2681b9b35b5d59ad052011ed96a96e17
SHA512 b81b287de73282cc5a7337559fbce5af01d1a440f04ee97c6a8e1de0c787ef38936c951b802014b841fc517fe7f2b916266dc8c35cd5de1ad0c630dc2218fa81
MD5 SHA1 SHA512

.rsrc/1033/GROUP_ICON/103

SHA256 6eb54801f91b6d8effccbfaefe6b2d7705a274a75940e6226e24e0d4ec58c396
MD5 6da8e7d5ae1d5d15e0230a67a7c16c6d
SHA1 678db52cbe5d617c33c6269bfd4b6d8d1a17f956
SHA512 a41f5e70082da47535ef2bea0c9dfe994905db538e74c54a74ce713533b67689d2835057421298f9fdb0f2ca6eaa03a2dddb0b049e800fd57a7dd0b0eca41135
MD5 SHA1 SHA512

.rsrc/1033/ICON/1.ico

SHA256 42b758acf60b6b46db5d55176111be21a5084d4b118ef6fc3231f129964e58a7
MD5 5a502ef4f9429bc6c10f780280ab8266
SHA1 94570e38d380d066d857ab786bdcef3743876489
SHA512 76f10ef079970ecdc47f97b64cf1edd8b65acfdc86e1b83e3ff2e38c1f5b6fe07b4a85c1fb9a0da080ccf91751dd220f8134ac5e5a1b3661972fe85f6cbb6bea
SSDEEP 96:Zv+kcC9gh19BB8S9McVCnQyTfujAfHfDl3C98LVTI:Zvo1f+LzWQ/Dl3M0W
MD5 SHA1 SHA512 SSDEEP

.rsrc/1033/MANIFEST/1

SHA256 48c4359222cd7e1a03298342d42bae80e711501fa8920b5f46d9a3c1bd7fc0f0
MD5 141ee0e5465402cf6fec9a038a99da38
SHA1 abc227a5024eefd3444a741b503dc5a86d160141
SHA512 58bbf1c50e02c08418de0e024ca147a474cfdd71d8c2c87b8fecd8c5a9cf32aac176f7843e8cad1b17bfed73354d9b89fc024f61cbf1530d5d842b777726abf0
MD5 SHA1 SHA512

.rsrc/1033/version.txt

SHA256 eb8edcd7a1ae2ceb0a5754b7b163357443ee05022c258b7a48fe2e8d7ae64342
MD5 25ad1dcd5b63dd8f3fe3f07e85a91e58
SHA1 3b77411011312a69e93b4b83c16e79ea803a7345
SHA512 f4392c28b8c9a85d581c648efc4a41b1022b44b09bf107114a09bb5a8b24965193fbd43d1223318fa99cd8a7d56406560993c3ae29a56590f2bed8d3ec6705c1
MD5 SHA1 SHA512

.text

SHA256 aec7a501baf364d5b111a8bd6b7dda9937238ed69c559c782fc2f8bf110e8ac7
MD5 370e28348084510e677d390bc66dbffe
SHA1 4af3228f747f30d1d33c37562619656f3b4785c9
SHA512 37690808ba04318f33e0da1a6b6fd3a965c8fe6afec7351e583fdb49a929ca5d47704403447c44682b2c2ce028e832dc2ca78d26d16d62f3b81e5f5457b5a488
SSDEEP 192:5+8C+EKS0O9ejYTDG8bcp4LlA+fnieXubWyD9JEBkGxVXJqoNyRJ:5NVjYTDG8gpF+aeXTyD3EnxuoN
MD5 SHA1 SHA512 SSDEEP

8698beb39476bfa3dcd76b7a487844c8.exe

mscoree

dotnet

.reloc

.rsrc/0/version.txt

.rsrc/1033/DIALOG/105

.rsrc/1033/DIALOG/106

.rsrc/1033/DIALOG/111

.rsrc/1033/GROUP_ICON/103

.rsrc/1033/ICON/1.ico

.rsrc/1033/MANIFEST/1

.rsrc/1033/version.txt

.text

Sharing

General

Malware Config

Extracted

Signatures

File Explorer

8698beb39476bfa3dcd76b7a487844c8.exe

mscoree

dotnet

.reloc

.rsrc/0/version.txt

.rsrc/1033/DIALOG/105

.rsrc/1033/DIALOG/106

.rsrc/1033/DIALOG/111

.rsrc/1033/GROUP_ICON/103

.rsrc/1033/ICON/1.ico

.rsrc/1033/MANIFEST/1

.rsrc/1033/version.txt

.text