RC7_UI[.]exe | Triage

Sharing

General

Target

RC7_UI.exe
Size

1.5MB
MD5

e1284994382f1b64011fac0ca6e5a05b
SHA1

740ff5838681e2d7e4b9af786fea63a72ae2ed33
SHA256

773c032febdfe5ef830896ff4e5a3c8060f009819c725fb8fe2ca21466f7b57f
SHA512

b44ec3b0f8b93a04aefba961dbfe81fa2618e258528a3502977a3ca9667a0e136729344d67a2f30bd26899a43a681ffd8cbc3985fff1d8fd8bfd3f36a2cbcabf
SSDEEP

12288:uCbABVLfTKQlgr/+Gqls4ER3kqjVnl36ud0zR/6CtQ9PUHIG8Dni4ToSx:6BViey/+jM3kqjVnlqud+/2P+Ai404

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RC7_UI.exe

Files

RC7_UI.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\kiosk\Downloads\rc7 - ui src (3)\RC7_UI\obj\Release\RC7_UI.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ