ReGrowtopiaLauncher[.]exe | Triage

Sharing

General

Target

ReGrowtopiaLauncher.exe
Size

1.2MB
MD5

4df570d357332ced1bcfb00eb4fe9638
SHA1

78bd17bc7c3396b5d187c2269f8d4afdfb2427ff
SHA256

a2773c53f8154f3f87d4ac1effb8325834932186c18203fa4fbaad696123331f
SHA512

00edacd09d32084169eaa2fe82cbf5f4f3382ee0aab1453a04515f2775f3eed3c30a264c11d284f79c812ab443fa30e0b136cba2538e289751a61c28654bc805
SSDEEP

24576:ETxtDP0HdizM0UbJ4qMM+e7uocjm/V7PRK:ETxB0Hd4fUl4qMhKomN7P0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ReGrowtopiaLauncher.exe

Files

ReGrowtopiaLauncher.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 183KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ