RuLauncher[.]Updater[.]exe | Triage

Sharing

General

Target

RuLauncher.Updater.exe
Size

24.4MB
MD5

012f04586d2087f57096d1843f207e49
SHA1

f438de335b9d577291de3396ada81b1e160ac354
SHA256

15213626fbb0362385d0336bd3d7de4242dd6b5cb54576778db6b39464a46757
SHA512

ce852aafd2c03c2004d1a6f9321f510fcefda34a053ef742d38c6959fdd2de470245f5b044c5d12c85e730ce9671bdd5a87698c836aea6cec83ad87c428d7c32
SSDEEP

393216:eVKMfhFAmRfglrmJcBGRZx+5BL0K1l8J1Jb930sh290xggytRTvZea0:aFAmR4k2Bl5Jz1ab3LWrT7Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RuLauncher.Updater.exe

Files

RuLauncher.Updater.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 24.1MB - Virtual size: 24.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ