RealUI-Installer[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RealUI-Installer.exe
Size

2.0MB
MD5

89eb91459182e588ed4cd43f1727dddb
SHA1

f74d3bc13dfc24ec8691d09d29e43f7855a2acbf
SHA256

8caec09c93616fab2515f9a2fe7c9a9683c55258878eea07453a8a30b25d37e7
SHA512

501a30554f2cc59d5021b648513c6c22f745e5792819dd9f3a49bd1d0e3b693b4a40dd043635ed200357f7bc02af6d0bd902cdf2937ac045849f426d3abec89e
SSDEEP

24576:FJ3P4/jn6t9/L4CnTw1Xp8H+FyLoxpDq/2HusXPhSU53P4/jn6t9/L4CnTw1Xp8I:Fl4/mPz4lOSy0C2HP8C4/mPz4lOSy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RealUI-Installer.exe

Files

RealUI-Installer.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 822KB - Virtual size: 821KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.4UB9y@I
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rze.cbF
Size: 986KB - Virtual size: 985KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ