RMW-2422018376[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RMW-2422018376.exe
Size

654KB
MD5

32a9a711591e86248b4f7f7fd61bdb9a
SHA1

589bf9da975e2bf7dc9878e3ccff15fd1287ac03
SHA256

f70e01f4a72c535a1be730861b039702d7d96dc20556ee212f1e20e0f34d25e1
SHA512

1f90f9fe6ac15d20f28848714b3ab5d26162b2a1e51325d92b2e87a44dfa30195369a2a8b903f9038b9a8e3721d4f6dc59ea3963051ef335cf4b870c71907c75
SSDEEP

12288:qa361h61EWGxz8xSkApyzeGdi2dxTmVU8hd1ZsdO3HFuX2GMp0qEKeMpH0gw9gI1:q/Y7GxzUSXy77dxTma8n1Z+O3GxMp/3i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RMW-2422018376.exe

Files

RMW-2422018376.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 636KB - Virtual size: 636KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ