Realui Loader[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Realui Loader.rar
Size

1.0MB
MD5

197da543be07563235800b264b724e31
SHA1

94938b3524a84940fe66ab0a8dca7a53d611119b
SHA256

c3f1365ffe0f6a2645fde6fa6e472e489a633e3b3c767bc387fabd837900db18
SHA512

421901f52aed7c111df3b70c1e509159d4de1dcb447283c2c69b0a4d97f1a3643cb1577852607fa97ba3276c4b11c327920501537a644ebbc120aa92da6289f6
SSDEEP

24576:ylQ0+RbVV3z/FOr8lUaXJUiMrvdaHYOJ30QqcdTlfWcdor:ylQTL3bFg8+a5UloHvlbqcdTlfWcdor

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Realui Setup.exe

Files

Realui Loader.rar
.rar

Password: rc
Realui Setup.exe
.exe windows:4 windows x86 arch:x86

Password: rc

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 822KB - Virtual size: 821KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.4UB9y@I
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rze.cbF
Size: 986KB - Virtual size: 985KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ