Behavioral task
behavioral1
Sample
9D2C7BC504BE4067C8F76AB0916C131C.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9D2C7BC504BE4067C8F76AB0916C131C.exe
Resource
win10v2004-20241007-en
General
-
Target
9D2C7BC504BE4067C8F76AB0916C131C.exe
-
Size
39KB
-
MD5
9d2c7bc504be4067c8f76ab0916c131c
-
SHA1
d21ed532bcc935a7c076631194c3526d8bd5cb40
-
SHA256
fc0e11d1b7440d910f260f1d371cf6182258eeaa9044bee78e68a9d065341a98
-
SHA512
e7b8844b227bf838d97d8b6743b97fa3bc607612b93dc09b38537b10ec9de10df34af0110581d2641b6e65398f6e596f440b61f16037fa1e8f59533c92b0f88d
-
SSDEEP
384:INVjYTDG8gpWNeXTyD3EnxPoNfxAb5hNVQStfWSr8q31NfPkfIZ:IPSnqyjSXVLfWsSIZ
Malware Config
Extracted
revengerat
NyanCatRevenge
52.70.134.237:5222
755485f7ad67486186
Signatures
-
Revengerat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 9D2C7BC504BE4067C8F76AB0916C131C.exe
Files
-
9D2C7BC504BE4067C8F76AB0916C131C.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ