Static task
static1
Behavioral task
behavioral1
Sample
rc72.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
rc72.exe
Resource
win10v2004-20250217-en
General
-
Target
rc72.exe
-
Size
85KB
-
MD5
7d8c06573fad926b86f5dcca4d79a938
-
SHA1
1deb1612b61a7074dba865546110e019e76d32e7
-
SHA256
b271c8c74d2f172b07adf103779729827971a383822275d0e10fe3cf60418b19
-
SHA512
7d3a9d0eed6e7f141b59f8e2e3a061a7b5ecc97f8a253be92f6185040f63cbbd4a2b4f9dafa1cd6885f06ffbbbf0b316e16afe38d0ebb8dfcd70d0ab5bcbf6aa
-
SSDEEP
1536:tm/+KAh2sM93znxGxPaL9NZcmtFGBdLaAcmvtBWwfSF/yim/1y1ejY6yFOBA:K+Kz33NGxSpzdFGBsckww/yjgf6yFOB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource rc72.exe
Files
-
rc72.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ