Raft Launcher[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Raft Launcher.exe
Size

2.3MB
MD5

9512690f8bf8fae1319e2e86715a6bff
SHA1

0797390c6608e2ca09119f290f37166c72e98259
SHA256

ef1c14557d392abe0a5226e5e3444edee85513fc301c49c50275cc4b6be16fb5
SHA512

8c994946a0e2e43a1b576e5be4bb9b9335af553f17b9861740a8b0b1004b617dbe19a9689793fb9822705c911ce5f730f6ef13019a79a991cd84e4ac57e7f83f
SSDEEP

49152:jkqXfd+/9AAhanz+zPPTBbWMx6NiWVzMyijqippe+Q7hZIAeLViHTp+EnxTIlDCx:jkqXf0F3WSLY9NiWV9iGNnx9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Raft Launcher.exe

Files

Raft Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\WPF\WPF\WPF\obj\Debug\WPF.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 551KB - Virtual size: 551KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ