RiceLauncher-windows.zip
- SHA256 42c072da16b51fa38420c901669976774cefa28e417dbac046aa1acd435a632e
Password
:"
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RiceLauncher.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
RiceLauncher.exe
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target RiceLauncher-windows.zip
- Size 132KB
- Sample260720-a645jac15z
- SHA256 42c072da16b51fa38420c901669976774cefa28e417dbac046aa1acd435a632e
- MD5 5f1603e3bdf84622b98e7f0853664ff0
- SHA1 99e2b83411be4ed1d1439e2850be99c6c39699d0
- SHA512 c4034d044a1aa4c62abca437e04b519b74dc72b9298a21ee7314bf35883864afe25ce1e214b2855561faba47b0d8dd3dfa22393e77dadea3f10a1a9ed7efc0f0
- SSDEEP 3072:RP/gorg91OTtes+GwUsQssc7K3GBHQQQHpkXW6RXsm:RvgbCtes+GwrZs6K3WwQfXWKXsm
- TLSH T1ADD3124821941DF8B18354F987EE559A7EC9FEB37DE527AB0C706C922EE7EE01D4000A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/RiceLauncher.exe
File Explorer
-
RiceLauncher-windows.zip.zip 132KB
-
README.md2KB
-
RiceLauncher.exe.exe 278KB
README.md
- SHA256 323bb9ab5776b1cd0848f67a80a482054545124176433ba6de22d856b874add0
- MD5 cdde6b2fbb16ada941e5c8b33f5905f6
- SHA1 111776566144dde7ddff5b00ebd7b93e8a3b7487
- SHA512 38007b86049138dc866cb83b348affb00de5affae2b982ffdd719d3ce5d7a24dc7d3c42c8b168749f60594cdc57621a2df73a45ecc9e14c37b44012b85625d48
- TLSH T10F41F108D36383B64BF405D1A38E62F3860F867B510A4FB1187D805D763D22DA9BA592
- MD5 SHA1 SHA512 TLSH
RiceLauncher.exe
- IMPHASH 89783111090df5db30becbc9d896747e
- SHA256 e725f732c0a1f566e618489698974a505bdbd9781f9c3575c29a4f5f55921a30
- MD5 72779a8cf71a703b9b7f8208a991081a
- SHA1 b99dfa94d478ff0007a756c50cea078ceaf6b539
- SHA512 96760eb530f2924c975ca277573cb6cd01ffd4ef7f5328cc7a6f8760e81b097f11fbcb5384ec87c8c4212871433db761615d60c35a0eb9969965552c9334b037
- SSDEEP 6144:Fu6DsH6Mcc0OSsiOQACTzjM9JN/eCnR7YgV50DEri2b3T:Jy7iRVzEfeClqDCb3
- TLSH T195546B0B750A787ECA86C4B8934B5863592634CF0B72BCEF47C09A753C669B44F3AB11
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
:"
Minor OS version
0
Major OS version
6
Entry point
198436
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
iphlpapi
GetAdaptersAddresses
winhttp
WinHttpAddRequestHeaders
WinHttpCloseHandle
WinHttpConnect
WinHttpOpen
WinHttpOpenRequest
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpReadData
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpSetOption
ws2_32
WSACleanup
WSAStartup
getnameinfo
advapi32
AdjustTokenPrivileges
ConvertSidToStringSidW
GetTokenInformation
GetUserNameW
LookupPrivilegeValueW
OpenProcessToken
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
bcrypt
BCryptCloseAlgorithmProvider
BCryptCreateHash
BCryptDestroyHash
BCryptFinishHash
BCryptGetProperty
BCryptHashData
BCryptOpenAlgorithmProvider
crypt32
CryptStringToBinaryA
kernel32
CloseHandle
CreateDirectoryA
CreateDirectoryW
CreateFileW
CreateMutexW
CreateProcessW
CreateRemoteThread
CreateToolhelp32Snapshot
DeleteFileW
FlushConsoleInputBuffer
GetComputerNameW
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentVariableA
GetEnvironmentVariableW
GetExitCodeThread
GetFileSizeEx
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetStdHandle
GetSystemFirmwareTable
GetSystemTimeAsFileTime
GetTempPathW
GetTickCount64
GetVolumeInformationW
GetWindowsDirectoryW
GlobalMemoryStatusEx
InitializeSListHead
LocalFree
Module32FirstW
Module32NextW
MultiByteToWideChar
OpenProcess
Process32FirstW
Process32NextW
QueryFullProcessImageNameW
QueryPerformanceCounter
ReadFile
ReadProcessMemory
ReleaseMutex
SetConsoleMode
SetFileAttributesW
SetUnhandledExceptionFilter
Sleep
VirtualAllocEx
VirtualFreeEx
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
WriteProcessMemory
msvcp140
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
vcruntime140
_CxxThrowException
__C_specific_handler
__CxxFrameHandler3
__current_exception
__current_exception_context
__std_exception_copy
__std_exception_destroy
__std_terminate
memcmp
memcpy
memmove
memset
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__p__commode
__stdio_common_vfprintf
__stdio_common_vsnwprintf_s
__stdio_common_vsprintf
_set_fmode
fflush
fwrite
getchar
putchar
api-ms-win-crt-conio-l1-1-0
_getch
api-ms-win-crt-string-l1-1-0
_stricmp
_wcsicmp
isxdigit
strcmp
strlen
tolower
toupper
wcslen
wcsncmp
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-convert-l1-1-0
strtol
strtoul
strtoull
api-ms-win-crt-runtime-l1-1-0
__p___argc
__p___argv
_c_exit
_cexit
_configure_narrow_argv
_crt_atexit
_exit
_get_initial_narrow_environment
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_register_onexit_function
_register_thread_local_exe_atexit_callback
_seh_filter_exe
_set_app_type
exit
terminate
api-ms-win-crt-math-l1-1-0
__setusermatherr
ceilf
api-ms-win-crt-heap-l1-1-0
_callnewh
_set_new_mode
free
malloc
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Name
.text
Size
192KB
Virtual Size
191KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
77KB
Virtual Size
77KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
464B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
464B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
100B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ