rcm[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

rcm.exe
Size

4.2MB
MD5

36ca4b69ea35550dbec94b2c9814f0d6
SHA1

a54e56736cb8222ac7b2baa9d9d77c50fd5f990f
SHA256

8149bd597d576187f8028ab76ce99d8dbfdaed9397ee051af7a5affbb7b30fa7
SHA512

8bd72e576e598918fdb0082a700525101dcc0cf57e57598f58bc66cb74b84dddb97fc573d6a7fc211f0a8c25ea1d7776a84ce7e55437cdf8bca5c0d9aa2cace7
SSDEEP

49152:WSR0wThKY5S4VTh+yARMTRqenTz8/cblnq8I7gRw8g4QSxxNA2o9HQvzYvE:awTN

Score

1^/10

Malware Config

Signatures

Files

rcm.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 742KB - Virtual size: 741KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16.5MB - Virtual size: 16.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/14
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/29
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/41
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/55
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/67
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/80
Size: 1024B - Virtual size: 686B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/91
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/102
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

.text Size: 742KB - Virtual size: 741KB

.data Size: 7KB - Virtual size: 6KB

.rdata Size: 16.5MB - Virtual size: 16.5MB

/4 Size: 236KB - Virtual size: 236KB

.bss Size: - Virtual size: 2KB

.idata Size: 3KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

/14 Size: 512B - Virtual size: 216B

/29 Size: 84KB - Virtual size: 83KB

/41 Size: 5KB - Virtual size: 4KB

/55 Size: 8KB - Virtual size: 7KB

/67 Size: 512B - Virtual size: 56B

/80 Size: 1024B - Virtual size: 686B

/91 Size: 33KB - Virtual size: 32KB

/102 Size: 3KB - Virtual size: 3KB

.rsrc Size: 67KB - Virtual size: 66KB

.text
Size: 742KB - Virtual size: 741KB

.data
Size: 7KB - Virtual size: 6KB

.rdata
Size: 16.5MB - Virtual size: 16.5MB

/4
Size: 236KB - Virtual size: 236KB

.bss
Size: - Virtual size: 2KB

.idata
Size: 3KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B

/14
Size: 512B - Virtual size: 216B

/29
Size: 84KB - Virtual size: 83KB

/41
Size: 5KB - Virtual size: 4KB

/55
Size: 8KB - Virtual size: 7KB

/67
Size: 512B - Virtual size: 56B

/80
Size: 1024B - Virtual size: 686B

/91
Size: 33KB - Virtual size: 32KB

/102
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 67KB - Virtual size: 66KB