Re-LoaderByR@1n[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

[email protected]
Size

1.2MB
MD5

160fbd904aabf491b94f7ffcbc0f8cfe
SHA1

59f6331b14ff5e7ec96d51922a4df20c07587ed7
SHA256

8140a5cbc825b8bf6105708ff1cb936ec80701c9c2ed959d26d5c8af7dba67cf
SHA512

8429c05c757a63af50dd195473c2070b56087c3d8ac0f700db48b4006401f79e5ac97ead2d1a5e32cb73ee755f3f80d58ca56b2b766c4439862b2021cdfcbbd4
SSDEEP

24576:h4UIwxdqxjIbEmz52Fd3mfckpdUAoCQ5+4kQBHbJ6I3:yz6gTmd2FEd7oC74H7Jb3

Score

1^/10

Malware Config

Signatures

Files

[email protected]
.rar
[email protected]
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ