General

  • Target

    RLAI.exe

  • Size

    3.6MB

  • MD5

    898bbb4fac0d31cacf8bd6f0ea1dcd14

  • SHA1

    cbc25afd3e39ec0b030a6148ad44ae882ad063be

  • SHA256

    87f84086ae3ebd38fe6df4c2a90cc2064787c9a863bb279cc278467aa2f0edc9

  • SHA512

    66848d109d566c7f6c273c86b0a8611340e46534a4f028f91091d06900448c95c4093bd987c06a2be4c246ded5c6baa8de3d03049f4cfa49da9b360e6b5a2ec4

  • SSDEEP

    98304:L3owdpWVtCoXe+qkSotby2LXGH0X67oS3z2fz0b6amXY/cO2B6y:L3pdgV8oqFo9d7TS3z2fz0b6a30OkP

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • RLAI.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections