RivalsExternal[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RivalsExternal.exe
Size

509KB
MD5

7b2f0c8112aa9498c864fccd3a5258d5
SHA1

8b44fccfdf873a69fe3f51cba9b9a7b00f77b4c0
SHA256

ce75fa27bc67730f94d5503ded4ec7c22c1a72add103cea29ccdc7dc3361f8e8
SHA512

5711eb921e865232da2fe242e5ffac42aabb3cbbc6ee6b1799818a7a6bf38b33ff0454bbc63c6eac53bc23826c36ab32a388bf65ca77cf3f6bf4aa7e6d5ed869
SSDEEP

6144:mx22P7Ue3e1fe6VlWT8b9t6+Sb4+t5zWov8blZ7FbNo:mA2TvkfPVle8n6+IvsjNo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RivalsExternal.exe

Files

RivalsExternal.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 444KB - Virtual size: 443KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ