2e79a1944328468eeed0bbf560ec3dec59012afc623f33d56fa3a71b82806a2f | Triage

Sharing

General

Target

2e79a1944328468eeed0bbf560ec3dec59012afc623f33d56fa3a71b82806a2f
Size

1013KB
MD5

e2cdb327564f4c16093786927ecd88a2
SHA1

b78a0aadd1e327dc76c0250b84ea43eacb776310
SHA256

2e79a1944328468eeed0bbf560ec3dec59012afc623f33d56fa3a71b82806a2f
SHA512

6d64f7a2ff78e892fdc9a352a165cb4df2e55e0462ef45b1948cc55da2bba454022b14aff0c8abd1fc7d9056ee270ee6068972aee74393487ea6150233a325aa
SSDEEP

24576:kuYGswU5Ti8MEvdohSZDB9jFevu0nG8Mjpahs+RpVFPPm4ms5Mx4D:kuYGUu8MEth6uWzsapVVPmA84D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Rwlleacvff.exe

Files

2e79a1944328468eeed0bbf560ec3dec59012afc623f33d56fa3a71b82806a2f
.zip
Order PO 202501164214.img
.iso
Rwlleacvff.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ