rhadamanthys | c06c42f9a7bbf83e103d46dea05c8f088502c77ea934fab85160696fcd576900

Resubmissions

27-11-2024 10:05

241127-l4k5eswjdl 10

21-09-2023 13:13

230921-qf7ezagb7w 10

Sharing

Copy URL

Twitter E-mail

General

Target

c06c42f9a7bbf83e103d46dea05c8f088502c77ea934fab85160696fcd576900
Size

448KB
MD5

9296a36df7cfdc7cd5ce3153c536c4d8
SHA1

547e0fde7d3c9bd1faff25f6c425e4f32903d751
SHA256

c06c42f9a7bbf83e103d46dea05c8f088502c77ea934fab85160696fcd576900
SHA512

af5e62c21df12c2d2ec9f9554c95eed5354c0b83f533e5777b3ed28e072e4befc4bf90c4a9eb45d549f589efadf00529befc0627fed378dc02ebdae0ae707166
SSDEEP

6144:L/E8DIpjK28t4snQRlp3z/pSZ+pDKpf9EkQbKxVK+PXItNOapG8RuzRiRh3Zi:dEpj7snuv/cgu4VGn6OaM+ucj

Score

10^/10

rhadamanthys

Malware Config

Signatures

Rhadamanthys family
rhadamanthys

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
c06c42f9a7bbf83e103d46dea05c8f088502c77ea934fab85160696fcd576900

Files

c06c42f9a7bbf83e103d46dea05c8f088502c77ea934fab85160696fcd576900
.exe windows:4 windows x86 arch:x86

fd020041ed8eb76ffbdb414a8b3716f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemInfo
HeapCreate
VirtualQuery
OutputDebugStringA
WaitForSingleObject
HeapDestroy
CreateEventW
ExitProcess
WideCharToMultiByte
OutputDebugStringW
CreateFileW
ReadFile
CloseHandle
GetCurrentProcess
MultiByteToWideChar
GetModuleHandleW
InterlockedIncrement
GetModuleFileNameW
lstrlenW
HeapFree
MulDiv
GetProcessHeap
HeapAlloc
VirtualProtect
HeapSize
GetSystemTimeAsFileTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
TlsAlloc
SetLastError
GetCurrentThreadId
GetLastError
TlsFree
TlsSetValue
TlsGetValue
GetProcAddress
TerminateProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
VirtualFree
LeaveCriticalSection
EnterCriticalSection
GetACP
GetOEMCP
GetCPInfo
LoadLibraryA
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId

user32

ReleaseDC
GetDC
GetSystemMetrics

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyExW

gdi32

FillRgn
FillPath
SetBkMode
GetObjectType
TextOutW
PtVisible
CreateRectRgn
ExtCreatePen
CreateFontIndirectA
ExtCreateRegion
CreateRectRgnIndirect
CreateEnhMetaFileW
SetWorldTransform
CreatePatternBrush
PolyBezierTo
CreatePalette
GetWindowOrgEx
GetEnhMetaFileHeader
EndPath
CombineRgn
CombineTransform
Polyline
GetViewportOrgEx
Rectangle
GetClipRgn
IntersectClipRect
DPtoLP
GetDeviceCaps
CloseEnhMetaFile
GetROP2
Arc
Chord
GetTextColor
AbortDoc
GetObjectW
PtInRegion
RestoreDC
GetTextExtentExPointW
GetRgnBox
ResizePalette
Polygon
MaskBlt
EqualRgn
SetViewportOrgEx
SetDIBColorTable
GetTextExtentPoint32W
GetDIBits
OffsetRgn
PathToRegion
StartDocW
GetCurrentObject
SetGraphicsMode
LineTo
RectVisible
GetTextMetricsW
GetNearestColor
ExcludeClipRect
DeleteDC
SetMetaFileBitsEx
CreateSolidBrush
DeleteEnhMetaFile
GetBkColor
CreatePolygonRgn
SetMapMode
CreateFontIndirectW
EndDoc
GetWorldTransform
SelectPalette
GetCharacterPlacementW
CreateEllipticRgn
SetWindowExtEx
CopyEnhMetaFileW
GetMapMode
SetROP2
GetEnhMetaFileDescriptionW
BitBlt
SetBkColor
CreateMetaFileW
GetBkMode
SetWinMetaFileBits
CreateDIBSection
EnumFontsW
SelectObject
UnrealizeObject
StretchBlt
ArcTo
PolyBezier
MoveToEx
DeleteMetaFile
EndPage
SetDIBits
SetStretchBltMode
CreateCompatibleBitmap
BeginPath
CreatePen
GetBitmapBits
SetWindowOrgEx
RealizePalette
AngleArc
FrameRgn
CreateBitmap
SetRectRgn
GetStockObject
PlayEnhMetaFile
LPtoDP
GetWinMetaFileBits
GetClipBox
DeleteObject
GetRandomRgn
SetTextColor
SaveDC
CreateHalftonePalette
ExtFloodFill
CloseMetaFile
SetAbortProc
SetTextJustification
SetEnhMetaFileBits

winmm

sndPlaySoundW
timeGetTime

msimg32

GradientFill

Sections

.text
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 324KB - Virtual size: 322KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

fd020041ed8eb76ffbdb414a8b3716f2

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

winmm

msimg32

Sections

.text Size: 108KB - Virtual size: 105KB

.rdata Size: 324KB - Virtual size: 322KB

.data Size: 4KB - Virtual size: 5KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 108KB - Virtual size: 105KB

.rdata
Size: 324KB - Virtual size: 322KB

.data
Size: 4KB - Virtual size: 5KB

.reloc
Size: 8KB - Virtual size: 5KB