RegCleanr[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RegCleanr.exe
Size

755KB
MD5

6595d9219001c38b9d727983b38addfd
SHA1

5bbcab38089b3523b099983eb908ec83b2fe7bd0
SHA256

03f658ba6352f0019aacd468798255d1dc388878c0e7f9c035b50b787e32d2ac
SHA512

1ce75b8cd79c19c4b2b1f02cd7a31027024fb52be31766b69c71cf174deb145eec398e5df1003237236d53b39c570fb15e1ba61b381c90883d1abbaecdaf9f23
SSDEEP

12288:D4CWVq+ZuRAQCc1d9fnrAz3Go7dobefHLTrRsUKtyc2KvmAkJm2ghO7Z4hsRv1dy:Ll+ZumNoPKnuiHfPZYMm6xEX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RegCleanr.exe

Files

RegCleanr.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 621KB - Virtual size: 620KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ