Rc7 Remake V4[.]0[.]3[.]exe | Triage

Sharing

General

Target

Rc7 Remake V4.0.3.exe
Size

1.0MB
MD5

4ae52cae7044da6688e77e675b4b5556
SHA1

e02d28a8716cb958e5a58eae91cbc2c740f16438
SHA256

4e674fe01f97520ac70113ce0888b7342fe24af8026307a4add5abd6914570df
SHA512

29bc5e27fe76b2e2f68ad7035f29c8f2ff1c8d15d7e0614c229a51ececeed3f79e54bfda08ee1e24d3dad6bb9611a7e43f492223b5f2665f4f7eba1a6be563d8
SSDEEP

3072:BH+/ixTA4fitMfEGA1+3ncQ/ixTA4fitMfEGAr:BYixjVftb9ixjVft

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Rc7 Remake V4.0.3.exe

Files

Rc7 Remake V4.0.3.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ