RMLLauncher (1)[.]exe | Triage

Sharing

General

Target

RMLLauncher (1).exe
Size

507KB
MD5

a1887288be1d739385b74a9b1e4ec776
SHA1

b4f9f7569b4eb9c01a964ea3e7bd58d4c2e3c5a1
SHA256

c1ec9ff1824ba53874ab1cb0f1e64c86ab84cfebc09434e33adaeea065211de1
SHA512

72a74af82bd764521d1c117145640d1e9974190350377e5776acb5797a8d4ab37263c8f8621af76899a50f4d7d586f75e47a7194cf43e93b30d0400ae2dab36b
SSDEEP

6144:9ZiiMGbeHPZKpGtpuW4gvbRuaBqwzGIWEj9O3whKqWeuW4gvbeuaBXVBE56w93we:7/gZpGW4SRuUqwtRwAhWW4SeuUjP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RMLLauncher (1).exe

Files

RMLLauncher (1).exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 372KB - Virtual size: 372KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ