RC7[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RC7.exe
Size

1.0MB
MD5

7ac6eacb4f22655818ec950582edb402
SHA1

66ca558a926274459aca6ee33bd57de1b80f9f6a
SHA256

0ea724a61530c2c9371ef337d7de627ffb332f2e350c4d560d63673292014eac
SHA512

cefa99d43879ab1a50930217431bbf1de9d84f8f0ba745ad7093012657474b4cf31fb90a75d4df82e5235b27d3d0bf6a752895d3c25fa31c13f01819abd843a8
SSDEEP

3072:2wTzL6ccTV3CL1RWcyMZZHklwrjL1a8bNUESxYR9yStbYMTgZcPkGmfnnWtaNSqL:lXaV+5FfpxZ/PPPTVBjteO5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RC7.exe

Files

RC7.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\catoa\Desktop\RC7-UI\RC7-UI\obj\x86\Release\RC7-UI.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 999KB - Virtual size: 999KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ