Rice2k-Magic-Tasks-v3.2.0.zip
- SHA256 4566112b9b0b34aaec35775d15df694143fbf524f6763a0dfe8dd0069d867342
Behavioral task
behavioral1
Sample
Rice2k-Magic-Tasks-v3.2.0.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Rice2k-Magic-Tasks-v3.2.0.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
General
- Target Rice2k-Magic-Tasks-v3.2.0.zip
- Size 25.1MB
- Sample261110-sbs3wsvthw
- SHA256 4566112b9b0b34aaec35775d15df694143fbf524f6763a0dfe8dd0069d867342
- MD5 4c9563edcc0420cebc834f17f97fb066
- SHA1 ee520cd01fa48a9f96ff5f111c3540b5926c22c4
- SHA512 0c86af5222c8c5c515d94a98030b1a892ca90a4012aaa41f057c0e392a992ff64c115ae3caacfc956c221811b040a21bcf2dd77f24856a74fd4412a3bfaf336e
- SSDEEP 786432:dG8CoX7yZX/twDCOSjEhWfJHoGw6NzvNaA3vkfIFmpXFIq+:A8tGZt4CZHwHAKiUFIV
- TLSH T1F247339C68BB3F22E1C5EE6DF150E119238CA9423E43C97DE85DA70748F705C55BBA82
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Detects Pyinstaller 1 IoCs
resource yara_rule static1/unpack001/Rice2k-Magic-Tasks-v3.2.0.exe pyinstaller - Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Rice2k-Magic-Tasks-v3.2.0.exe
File Explorer
-
Rice2k-Magic-Tasks-v3.2.0.zip.zip 25.1MB
-
LICENSE1KB
-
README.md7KB
-
Rice2k-Magic-Tasks-v3.2.0.exe.exe 25.2MB
-
rice2k_magic_tasks.pyc209KB
-
docs\RELEASE_NOTES.md1KB
-
docs\screenshots\calendar.png.png 36KB
-
docs\screenshots\dashboard.png.png 54KB
-
docs\screenshots\help.png.png 55KB
-
docs\screenshots\tasks.png.png 38KB
-
docs\screenshots\themes.png.png 50KB
LICENSE
- SHA256 ce3e418eb010bd3046959f358cc79d35466fad16211225b33bdac78c262fa7b9
- MD5 bd06f539e9ed39a48ec56cc1b4525f68
- SHA1 cfa7dfa84c37140d6e44a8762d3d08039cf82f60
- SHA512 382c512b6c6f7e74a5932ce9a46bf89cc73e4d28bbc62e9cc2ef7a956a622193dcd59073c42d835ab7c395a0ef48c88a061118ecaac6ac410500b793b804eeb0
- TLSH T10911751E725107B6189B13A05AB8ACD5F23BB25F7A6F2A84246DF345233B06CD5FF844
- MD5 SHA1 SHA512 TLSH
README.md
- SHA256 0216f5ad25907322573e0bd98e4b806725f97174976bf0d6a016f295fa3a009b
- MD5 ceb2704e02dcee622b262156acc84c6b
- SHA1 c5e9af32003d0bcb55926b5f4e7739e08d822734
- SHA512 f0c0f834dd1a5ad72a21451c5f9ffde392c55da64465266e531873f5f8862f40cca49bc8168ed0b0cc3ab9a9bf8ecf77f074e9fe653f89ef6b6f380a1e064425
- SSDEEP 96:+xJwylsOW/krjhBILQ77jC39SIRyqAWULSu4uKksbT8bSzMcjq8nEyKsdMbKgUvj:+D53ILggRTNaR6msAU//Tf
- TLSH T1C6E1C75FA11163775B920369D3CBA2A3DDFAE619A317AD18505C417C33280BA82BF7CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Rice2k-Magic-Tasks-v3.2.0.exe
- IMPHASH dcaf48c1f10b0efa0a4472200f3850ed
- SHA256 cfb7a0433a99b773aff412719e55f4f342a5989fdc092c7b445c2c6d3848e893
- MD5 e1fe52a661bd4cf824d7f664847214b2
- SHA1 3baa771f728718a4b09822484bf57b4535de33e9
- SHA512 2ea65f43669cc2c69b8fb0ac8382028d164bacb7fe82ba9c65fb2a2c911a56cf4d1f662663a2cbc10f3bbcdbdfe5752e09067891207d9e7826cad5b12674c0cc
- SSDEEP 786432:pWSOmW8KFC6LLsKMMo5ovsVuNwZHjTvV/M8+TZV4BS4+DL4r:MSJWVCtoeSqje8+k8DL4
- TLSH T1C447339C37F619A5E5D6D3399080C61AA36071032BA1CA9F97E95A030DF71ECFE76B40
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Pyinstaller
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
57280
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
CreateWindowExW
ShutdownBlockReasonCreate
MsgWaitForMultipleObjects
ShowWindow
DestroyWindow
RegisterClassW
DefWindowProcW
PeekMessageW
DispatchMessageW
TranslateMessage
PostMessageW
GetMessageW
MessageBoxW
MessageBoxA
SystemParametersInfoW
DestroyIcon
SetWindowLongPtrW
GetWindowLongPtrW
GetClientRect
InvalidateRect
ReleaseDC
GetDC
DrawTextW
GetDialogBaseUnits
EndDialog
DialogBoxIndirectParamW
MoveWindow
SendMessageW
comctl32
ord380
kernel32
GetACP
IsValidCodePage
GetStringTypeW
GetFileAttributesExW
SetEnvironmentVariableW
FlushFileBuffers
LCMapStringW
CompareStringW
VirtualProtect
InitializeCriticalSectionEx
GetOEMCP
GetCPInfo
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryExW
GetModuleHandleW
MulDiv
FormatMessageW
GetModuleFileNameW
SetDllDirectoryW
GetEnvironmentStringsW
SetErrorMode
CreateDirectoryW
GetCommandLineW
GetEnvironmentVariableW
ExpandEnvironmentStringsW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetDriveTypeW
RemoveDirectoryW
GetTempPathW
CloseHandle
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
Sleep
GetCurrentProcess
TerminateProcess
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
LocalFree
SetConsoleCtrlHandler
K32EnumProcessModules
K32GetModuleFileNameExW
CreateFileW
FindFirstFileExW
GetFinalPathNameByHandleW
MultiByteToWideChar
WideCharToMultiByte
FlsFree
FreeEnvironmentStringsW
GetProcessHeap
GetTimeZoneInformation
HeapSize
HeapReAlloc
WriteConsoleW
SetEndOfFile
CreateSymbolicLinkW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
RtlPcToFileHeader
GetCommandLineA
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ReadFile
GetFullPathNameW
SetStdHandle
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
HeapFree
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleOutputCP
GetFileSizeEx
HeapAlloc
GetCurrentDirectoryW
FlsAlloc
FlsGetValue
FlsSetValue
advapi32
OpenProcessToken
GetTokenInformation
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidW
gdi32
SelectObject
DeleteObject
CreateFontIndirectW
Name
.text
Size
177KB
Virtual Size
177KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
79KB
Virtual Size
78KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
46KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=183, id=261, version=33145,
count=12, id=260, version=33145,
count=11, id=259, version=33145,
count=3, id=253, version=35207,
count=9, id=259, version=35207,
count=17, id=260, version=35207,
count=40, id=261, version=35207,
count=11, id=257, version=33145,
count=159, id=1, productName=Unmarked objects,
count=27, id=260, version=35225,
count=1, id=258, version=35225,
rice2k_magic_tasks.pyc
- SHA256 401823cbfde1e798a04c362246cf5a253e269c33e5d442880dbb5d698e688486
- MD5 fdbf53f50fb296cca122ddd81f476e2f
- SHA1 300db3bbe3718545f335395cc67fe8e28a9ba932
- SHA512 04fb33ebcd33f17c2bca4a733d8f61a103009da27d972581d0192731fd0c29f2a0bb8e4be175818ffc2a970abd9ef92f6b71723674d769ff5d9fbd97da02dd2d
- SSDEEP 3072:9rTM9vt3KPPIjhv5s/ISxyI1cvjXPoF2e3jv93pZjHUoJ7vWWrt8aBjtmWp8:9ro3KXIjSIsCbAYijv9vDUwOWh8ajmW2
- TLSH T13724D74BA9309627FE64B13550E98980E3AD7ED6B710CB37300F55793EE66B6CCA420D
- MD5 SHA1 SHA512 SSDEEP TLSH
docs\RELEASE_NOTES.md
- SHA256 1d13b8adf5e3c907210d62e22528f5465c2070538443255fe5fa3c68bc9e6ae0
- MD5 d6d3a5c3de918b701c38f6434222ab8f
- SHA1 3fa5e35dc9833d7821d700d118c9bd67379b790c
- SHA512 a439ee42ed79fb277ba2ea5ac7ccde03dcd02297cbcfb18861054f64a1462b17b5d15af24864c2b938d410f334144b32525b8eb3fe21fef48a7e37ccc3a7df2f
- TLSH T13E2135CB860553BB1BB6036FE20AA2734F36ED0E771B3D51104D173C316827516B97A5
- MD5 SHA1 SHA512 TLSH
docs\screenshots\calendar.png
- SHA256 ec7dd4caf6480e954dc0a04fb0346881947cc0bef278a4b861999f1586810edd
- MD5 3d2398c79ae27dd70aab90f00252092a
- SHA1 71f7a8f06031434f17d557f03cd73ecfba2ed7eb
- SHA512 fecc3d8e6e5ae5bffd69c59443186aa0669d10e3e6c940cbdc18edd1276fd6d338a2bb2a18bae166cb694f7dacc90e25a814654b9d58c8f894ea7d9a6f93e256
- SSDEEP 768:+TLza+6yVMEWLJTEk+Y2Hnm9PcJ8+U8bG69rhKWIFqqW8xSSkA:+ve+66MEWLlELY2HaPcJRUwz9rhIw4SW
- TLSH T10BF28E9B8CE54407D88DA0F345DA22121FF62CF51B7AA70B5D30745AF92F4BAFD86260
- MD5 SHA1 SHA512 SSDEEP TLSH
docs\screenshots\dashboard.png
- SHA256 095baa299dfb1e3000082e3f99802a6f95ff5a93168e81bb882c1bb6aa230b9c
- MD5 88d5a84125c6a404db1e1eac50459d54
- SHA1 038e7ecb8883ce4bb3189677bb30e916860aae8f
- SHA512 ad0f894f5aec742f9002e365f4d340da3fec1bc212d7cd87fc223b668c5b8278fc19ee35ed553b787b90e823ca429a17660161dddc3df5dbf44f85b82ef97fc9
- SSDEEP 1536:zFvUpDOITWE216xbIDCFtyJI8+cZojkzL:z1UEY212bIOPwI8+cZmqL
- TLSH T14C43C083F0078796EE2E97F6AFDB2E323E979C6140184B170264F5919C637F4ED61628
- MD5 SHA1 SHA512 SSDEEP TLSH
docs\screenshots\help.png
- SHA256 825794eecc981b8b1dbba7174b747e41601bcc1789d099c1abfbba819ee582d7
- MD5 b5557adf9c89cea4947c309f08843505
- SHA1 36213aa32a140482a51d571d5e5f027f67addce6
- SHA512 4f6cca92b4b697ac14a3335c9c776a6eb6b1b95ea5bc76cae08fdc7ae0cf9d47ee084e0a74234943c01a37673847315f30286ff342e4d4969ec53e65d73424c0
- SSDEEP 1536:fYdTsTUJqGiXur41GgfbiaMBqkJQv+1DdEN+:fYeGAur4lf/JQWShl
- TLSH T1AA43E0ABADD82099E44DD2FB21DF5722BB72DED85B2BAB07553070A1F423074EC549E0
- MD5 SHA1 SHA512 SSDEEP TLSH
docs\screenshots\tasks.png
- SHA256 bd96bc5c8a8039ae71c874aa1f83ad1b115f24e74953d9982e575fd9bf12aaea
- MD5 f9d65a80d7f5856b79346aa633bce453
- SHA1 6b21c4c38e39b3c5c0518e8261b0dbcc46d8559b
- SHA512 8a1fb1e1d856a61f32a1322ec5d76c11b1648944c6a622a2773ccfa865433e63de4026d0fca703354423b98ffb00009a897ce154139975e088a3c4a60bf9cd01
- SSDEEP 768:0kXRCQE9t+SjVDvWq7P1NGhaZuRngn0JNtWzgOTEiY0izZOw:0kBC/Tj5eqxNwa2z/tcg4ERpNOw
- TLSH T1C503AFB8C8B4811AC52D92F951DF2B681EEB65A053C2279FC73C70662DA73B4DCA71D0
- MD5 SHA1 SHA512 SSDEEP TLSH
docs\screenshots\themes.png
- SHA256 8aa5555e9a5c801e9614c8f7a1f880cf551be28b53dc597f66f34509df3deef9
- MD5 aa33da6f8084ace4d4777d13564ce469
- SHA1 0c25968be380c85ddd13d09a3c8aab4560a4b54e
- SHA512 44593469fe2c5955ddbb9c4e6e098d17ce92e03b12f10b15b2d2df4d2def41c8da25465c8f53337ac8516f2fe045dd1ed9953e0049fc06580251c9395a9c7dbf
- SSDEEP 768:5XfCJck59xeEKcawgd3PjlIgGHXs9uZpQqA/DJdz0/RLUkWIvi15NhoJ:5Xe5P6537Kg8LZpQHLJKZWbLe
- TLSH T16033D0A6E40A08AADC5AE57844EF5F30A39D4C6DC188175BC215FA14BCE738EE4970B8
- MD5 SHA1 SHA512 SSDEEP TLSH