REVISE_RECBTAAH-PI[.]exe | Triage

Sharing

General

Target

REVISE_RECBTAAH-PI.exe
Size

676KB
MD5

d0c54245dc16324c9170c419f2500737
SHA1

642c7dd025dc31d39b26af7a7be53ba617e78bd4
SHA256

6c22578a9080fc7f38d949df46f1bb88f386fd17ad76d78cac31e5b7782a2685
SHA512

1e95e9efc025c53192de36154f51198181ec445145fdfe7f3b1afc83956cc49a04cbd9c6d318dde926da27057cf149565f5de5cb4208cfa78e01eef3f1f582e4
SSDEEP

12288:49TK3cUmdavrlTGt5jw0LECUfE1F1Yl7tpkA1A9:0K3cFd6JNbDc13SHkG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
REVISE_RECBTAAH-PI.exe

Files

REVISE_RECBTAAH-PI.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 665KB - Virtual size: 665KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ