Easy Renault PreActivator[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Easy Renault PreActivator.exe
Size

147KB
MD5

6f00c93811e2ccb08d42b43c16b46779
SHA1

4d409ffe510b7aa30a8304cdeea1bae70de3a1e2
SHA256

6c1adc606283aef37ae9a9b79a52c315c74ef95eaeed69fcd1569112efa21cd0
SHA512

5f16b7b8fba19219c85b5182fcb4781769a0227f0194ef9eed140e406b0a736bddabb61e041ca4be9c039c5edbfc4df614cd751bfe0360655ff4d168707474c3
SSDEEP

3072:GZ0/C7icooRYyjDcaU/AUtbRTZTbbW9RPeAEIiAKsn6GpbnGEi7VmTh:D/YZ6yTsAsf29R2AEUKcZVnNi7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Easy Renault PreActivator.exe

Files

Easy Renault PreActivator.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 145KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ