rEplpxu[.]exe | Triage

Sharing

General

Target

rEplpxu.exe
Size

51KB
MD5

c0249761b76a5418f83c6db4c415979e
SHA1

15c5b7f4edd665708de22d79d815bd974316e991
SHA256

d9ea9774f917b5bf1de5f8e166e6f918574ce9f1a0bc05c7ceaf929d3dc9a8c1
SHA512

333280f338a6e14c0412fd158de8921228128495208e2ee00a6aeeb17845db0d189e5625401bdfb2362c77d95cf37234b5bfbc6986aa833face2969f67a1ad5e
SSDEEP

768:TPdSHH6SMmQBG2VsmmMM8G1uQWctc56t1toDn8sAdVndyjok5:5463nC2iub5BUVnd9y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
rEplpxu.exe

Files

rEplpxu.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ