Rusticaland-launcher[.]exe | Triage

Sharing

General

Target

Rusticaland-launcher.exe
Size

64.8MB
MD5

cf54cb776822a73090dc6b676e38782a
SHA1

f1ac2a51e35e30c07ed2df769135295d3a5a88bf
SHA256

fc93d7953819ec00809d4b231ce8b96d67d3a8cd46d13d0becb463fe16bde68f
SHA512

8cb5dcb036662939b45d4c6ef991291f6d5efbac5fff79a01c43181632acd081f68f6ffe4459aec1ee2c7d3880ef8fcd5e44b85e173491034ccb5945be89c081
SSDEEP

1572864:R9LHOdEv/78Bl9Bzs7hwOq/VE2kUC7dTiMuR34H8P7o92Zh:zjOU/e9FOIaLW1xP7o92Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Rusticaland-launcher.exe

Files

Rusticaland-launcher.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

S:\RUSTICALANDPROJECTS(SpeedDrive)\SAC-SteamEdition\build\Secured\Rusticaland-launcher.pdb

Sections

.text
Size: 64.7MB - Virtual size: 64.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ