renmae[.]exe | Triage

Sharing

General

Target

renmae.exe
Size

23KB
MD5

6838d8f7a93b769099e6b534398a3260
SHA1

924154b1197b58e783fea2507c071081bdde3b51
SHA256

2dfe7ea962b7c5fd23e9d710bae5aec1d2936c2500775658e410f8d68c5b4619
SHA512

402909e024f30418ff0c9dc8738e4b363a1234e481c5d9dba237b15e6bb82de550562fe6a105625a2395c850bdaf4f2f43391ee9ab031f9aa9baa4e01ff9f12d
SSDEEP

384:ILAkZtonVrxXDlX7sudaLi83hPLTuOm1sICJbt5j8KoQrJKdjT0:2AkZtK1lX7sxTITRBA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
renmae.exe

Files

renmae.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ