RRC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RRC.exe
Size

452KB
MD5

0752991391f3c5d7085e3bfd7c52cb3c
SHA1

b111e022c30308bc0d81e2645bb65ef22e701395
SHA256

50c69a404c1ff9158886cdc10fe2e46cc867d048d20bde8b9e40e39d5d215fb3
SHA512

802d563b87d0998307f4276c719301b4283098fe81e95b8240529aff5fd656b782555bb6799868e74754a0103fb7c1f3eca93cb0b5ca1d3464e09f3d693a385f
SSDEEP

3072:+8BY7/4jkB9/m+Is2XY7/44Y7/4nGT+Ga7HqR4XXEiQUPT1k2E3Hdc5A18wS0Ha3:PkECA+IsUkVkOGT+Ge9UiBa1qrk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RRC.exe

Files

RRC.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 383KB - Virtual size: 383KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ