RuinarchPlus-0[.]12[.]0[.]zip

General

Target
RuinarchPlus-0.12.0.zip
Size 113KB
Sample261102-p259csh19w
SHA256 2f00a636e0d0aca173fe6940a76188da7d09d7046aa18232dd98b1e1bc06c799
MD5 2b37ea5475ade424410c5f77eaae5abc
SHA1 1a3c845001191e6c0500eed54337ce91360d112f
SHA512 06088bbe775cc41d226f003cf739549a18faba966d651eadd4c9288dbf14f0bf5f39df93dda66b42b86df570aab63c975478c3331bd1556f087bf380206154c0
SSDEEP 3072:D6vttY7rUbgB9V4w/p+SFKlgCbwk+MxDx6u:D6vttYXUbg6u8SFlCbvxDxz
TLSH
T1E2B312D8276C98C9C68597DC1263693E61FCE8828F1976426E98BDCC30C8B5FB371D12
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/RuinarchPlus/RuinarchPlus.dll

File Explorer

RuinarchPlus-0.12.0.zip

.zip 113KB
RuinarchPlus/README.md

32KB
RuinarchPlus/RuinarchPlus.dll

.dll 234KB
RuinarchPlus/mod.json

819B

RuinarchPlus-0.12.0.zip

SHA256 2f00a636e0d0aca173fe6940a76188da7d09d7046aa18232dd98b1e1bc06c799
MD5 2b37ea5475ade424410c5f77eaae5abc
SHA1 1a3c845001191e6c0500eed54337ce91360d112f
SHA512 06088bbe775cc41d226f003cf739549a18faba966d651eadd4c9288dbf14f0bf5f39df93dda66b42b86df570aab63c975478c3331bd1556f087bf380206154c0
SSDEEP 3072:D6vttY7rUbgB9V4w/p+SFKlgCbwk+MxDx6u:D6vttYXUbg6u8SFlCbvxDxz
TLSH
T1E2B312D8276C98C9C68597DC1263693E61FCE8828F1976426E98BDCC30C8B5FB371D12
MD5 SHA1 SHA512 SSDEEP TLSH

RuinarchPlus/RuinarchPlus.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 1b286dd55326f96af6df555d9446e4b5ea4be3d3674df76a39f793eaec37fa42
MD5 e64581db0ed357712591270a8f61d9b7
SHA1 b59a0b906caceddce12e6aea8ec310344fcb2dc1
SHA512 e05e3420594b42a97cb3b54533c8da9ebc66e922124260d58c8c485529ea585bba0746b12c3d063425b00d106ca74ff6e8cb7984d86b9cdebe63ff9fdc20d8c3
SSDEEP 3072:/FMCifiyDiRw/sh6Wu0RDO2XEq/rMwS4lmBXRqsEl6m+/RGLSiEFe+vqCnO5:9fRySp0YS4QXk6m+0QFF
TLSH
T155343B6823E84E55E2FF2B75B47226410339FA57C8B6D74D1DA450FE1E323968A00BA7
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

246146

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

RuinarchPlus-0.12.0.zip

RuinarchPlus/README.md

RuinarchPlus/RuinarchPlus.dll

mscoree

dotnet

RuinarchPlus/mod.json

Sharing

General

Malware Config

Signatures

File Explorer

RuinarchPlus-0.12.0.zip

RuinarchPlus/README.md

RuinarchPlus/RuinarchPlus.dll

mscoree

dotnet

RuinarchPlus/mod.json