General

  • Target

    RLBModsLoader.exe

  • Size

    3.8MB

  • MD5

    fd4ea8cd056d9648350d23753585d719

  • SHA1

    2a061bbf39f3b48993d16a32aeb75735280bfb74

  • SHA256

    3a09dedf7fe8b548fa22be0f5d617919cb4a99d04a8d05ed0f338a7f8fcf2754

  • SHA512

    bc4e61a806ad4743ae31e9dd051c2930c5204401c33392e2b7ff36f2901fbb18d09cf0399c2bd3551d7430e39f5724c4c0381efa2d13e255ca494a9e8d44f005

  • SSDEEP

    98304:upikH14n818tFPP5Chl7sMWRmcJj3e9rvubt:wlHyn818tNQP7s79LQrG

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • RLBModsLoader.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections