revengerat | 8df32e8825212ac35a04f7cf0c408635e4631579182147a2f5378f88162128fe[.]exe | Triage

Sharing

General

Target

8df32e8825212ac35a04f7cf0c408635e4631579182147a2f5378f88162128fe.exe
Size

26KB
MD5

8698beb39476bfa3dcd76b7a487844c8
SHA1

bdda76b09161ec339874175ebd19be7870b56e5c
SHA256

8df32e8825212ac35a04f7cf0c408635e4631579182147a2f5378f88162128fe
SHA512

e9c73d9092439de3b911ce7faca16d34ee37f5d2639b3cb78078b1387942e8cdcce94595f44c65765b03840e8baba851b61d4a16acbea88aeab75a4fafb69faf
SSDEEP

384:tNVjYTDG8gpF+aeXTyD3EnxuoNhv4+LzDDG0feb/:tPSYGyjSTdDPeb

Score

10^/10

nyancatrevenge revengerat

Malware Config

Extracted

Family

revengerat

Botnet

NyanCatRevenge

C2

54.234.69.32:333

Mutex

f6af09745d

Signatures

Revengerat family
revengerat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
8df32e8825212ac35a04f7cf0c408635e4631579182147a2f5378f88162128fe.exe

Files

8df32e8825212ac35a04f7cf0c408635e4631579182147a2f5378f88162128fe.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc
.rsrc/0/version.txt
.rsrc/1033/DIALOG/105
.rsrc/1033/DIALOG/106
.rsrc/1033/DIALOG/111
.rsrc/1033/GROUP_ICON/103
.rsrc/1033/ICON/1.ico
.rsrc/1033/MANIFEST/1
.xml
.rsrc/1033/version.txt
.text