PigeonRBX 1.6.zip
- SHA256 24c4d85e2a7dd5ca163e35a3e7b07cfda0be0aa04320b79d874fa527da58780f
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
PigeonRBX 1.6.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
15 signatures
900 seconds
Behavioral task
behavioral2
Sample
PigeonRBX 1.6.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
900 seconds
General
- Target PigeonRBX 1.6.zip
- Size 20.9MB
- Sample260723-dkfftsff63
- SHA256 24c4d85e2a7dd5ca163e35a3e7b07cfda0be0aa04320b79d874fa527da58780f
- MD5 df0297c9eb3822ee7d05a2bca2f5eeaa
- SHA1 1d45fe1a1195e5b14400a7fe04239a78da366418
- SHA512 02c6fe0a56afefe9a51d7059042dfb41a78ed89ab2a98c2dac280c96040c724d44b7a5d44b18e78513797feda12d48c631136059952c605f9051952ea85605f8
- SSDEEP 393216:JD/H3mk8Yf98qjibAAodXfA7tKesSornijDMS0WWptR7QQe5A2ueCDZSWyD:R/HzaqOMAodXcASornc08OxtEWyD
- TLSH T1FA27339DF9A2385C4FE1AFBA2C1371D42FF91A0619938C747BAD818CE7907F584582E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PigeonRBX 1.6.exe
File Explorer
-
PigeonRBX 1.6.zip.zip 20.9MB
-
PigeonRBX 1.6.exe.exe 25.2MB
PigeonRBX 1.6.exe
- IMPHASH fe05c6eafb12b5b0195fa65d2dfd1307
- SHA256 61f02272c2f372891f28ee13c234505c87c6055eb8951381e49c3d57e6ffb021
- MD5 30d1b145a3d9e50966a352a51eb9c7f4
- SHA1 7af4b341abf2eaa83261c00f996cead4b8a0904e
- SHA512 4713b756fd668626484c7b1855a52aea2cfe4bb6a8cf5dd15bbb6f2d03982468be3a9b8091bac5161dc0daf761f493b7117d32d0f3300b53bcbd1bec5ccf1a23
- SSDEEP 393216:n4GeUEJypIaqmqA/ZUONuixVIlK6i40BqAw5f+hASWjxBPE8kt1:4GNEJyWaBqA/ZUMBxVOKf4CEmByXPc1
- TLSH T1644712D978E091ECC892C534D6892BFDE0E9748D4E79982FBFC718012A31D96CCB5936
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
28524988
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
Sleep
user32
ReleaseCapture
advapi32
RegCloseKey
shell32
SHGetFolderPathA
ole32
CoInitialize
d3dcompiler_47
D3DCompile
api-ms-win-mm-time-l1-1-0
timeBeginPeriod
imm32
ImmSetCompositionWindow
dwmapi
DwmExtendFrameIntoClientArea
msvcp140
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
wininet
InternetSetOptionA
winmm
PlaySoundA
d3d11
D3D11CreateDeviceAndSwapChain
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memcpy
api-ms-win-crt-stdio-l1-1-0
_set_fmode
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-heap-l1-1-0
malloc
api-ms-win-crt-convert-l1-1-0
strtoll
api-ms-win-crt-runtime-l1-1-0
_initterm_e
api-ms-win-crt-string-l1-1-0
wcslen
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
api-ms-win-crt-filesystem-l1-1-0
_lock_file
api-ms-win-crt-math-l1-1-0
cosf
Name
.text
Size
Virtual Size
919KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
143KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.;T9
Size
Virtual Size
15.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.FqC
Size
512B
Virtual Size
488B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.]6%
Size
25.2MB
Virtual Size
25.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ