Battle[.]uRTW1sBi[.]net-Setup(2)[.]exe[.]part | Triage

Sharing

General

Target

Battle.uRTW1sBi.net-Setup(2).exe.part
Size

3.4MB
MD5

fc45618c763d426e7150b2b59b6855df
SHA1

cf6e66813c4d149af4cc59c7db3e085481476af5
SHA256

eabae8760bb26c2e1004c0cada8fc3f215493add136b0f8f6217099859f3c4dd
SHA512

7afd9082a8cc5060198a6ba12291a83c7ab86b5bdedfe54c1061c4977ddbe30f5a45178ec6a5de87632fcd34ffa6b63b30c55a17b65d5d47877f8a1d0f7fcd85
SSDEEP

49152:9i6038hOWWmkmxmz1UDoo2dm8Yfm2Da4QdoHAccODoLW/9AfuHj4JDIt4m/IPfdE:9iP8h0mg2fZ8ccODoilA4jvtqdE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Battle.uRTW1sBi.net-Setup(2).exe.part

Files

Battle.uRTW1sBi.net-Setup(2).exe.part
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 106KB - Virtual size: 477KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 419KB - Virtual size: 418KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ