ritem0053902503[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ritem0053902503.exe
Size

201KB
MD5

a0b45ec760b319213c9c677ece3c9c5e
SHA1

c04cea6a2dc9d4bf3044b5bb24c885ff915e455c
SHA256

9266476c2c9172dba146796c4ace1a8cc0ce1a926a45347284f4f41e4312a8e2
SHA512

10c4ea3eea3d54d82c1b93576e1288b63ffa771bb4dd781eb515ee91708db0d1d2e043a344d00d69e07caf4ea1272614082fd2886815b8b9362800a7d0b26bb0
SSDEEP

1536:Xnhqp2/cVJQrtA2AY1c9wqvnAv77vvvvv7vvvvvvv7vvvvv64+mhhhm+DtqOgn:Xncp2/wJQrtT+9wqY+mhhhmitqOw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ritem0053902503.exe

Files

ritem0053902503.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

R6}.Q}
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ