RuLauncher[.]Updater[.]exe | Triage

Sharing

General

Target

RuLauncher.Updater.exe
Size

18.2MB
MD5

5354ff34e1ea50a7ad81a698a09bdf14
SHA1

902f1516a3f615f1daa1c68d1c58e09cf5cb7732
SHA256

04c2f0cdc0dd90aec5e0abf092da045c0f30bbf14de1659f4fb63a9ed4e03b89
SHA512

40e865040f36093945535ce8966f69e18638581d1eb446bc1bfee3cf4f6e9cc1fd89bec9a40dc9c262e295dac8cd60da261af1c4c11651f114084b15a8b7e11c
SSDEEP

393216:/VKMfhLu0sh2rGkJ3p+rVjJWXNplH1+v2ytRo9p+PokSllMq0+v2yt9C:VacJ3pyV8p1EtT4p7l3t6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RuLauncher.Updater.exe

Files

RuLauncher.Updater.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Igor\Source\Repos\RuLauncher\RuLauncher.Updater\obj\Release\RuLauncher.Updater.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 18.0MB - Virtual size: 18.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ