Rte[.]exe[.]7z | Triage™

General

Target
Rte.exe.7z
Size 4.6MB
Sample260417-ej877ahy7s
SHA256 a0f84dddf803c5edb0a9e67526089650240a8947df243e43e2ecf19b549c41c9
MD5 136a58671e32a43efbf3c4092c5db818
SHA1 9c5787b2edb5e9742ca4d67112c1d557c2169e76
SHA512 75238961ad149507da7fd8782b15b482300059ae0334835402f618bd1b576f93abc1d9007ffe874e40d448b72299aeccbcb3318d57bdcb1723cbb373ae25a89f
SSDEEP 98304:p+UhfZ3Iji0Jhotqst0ndjsBiuWieZPFh5KE8kiqszt1OBWVvTc1T6gY9:NB3Iji0Jhot/t0djuiuZeZ/IkiqsznOE
TLSH
T14726336F2441F3864630963016CB95CF334C45DC3A02F99B29385BF99EA3A7DB542BB6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Rte.exe

File Explorer

Rte.exe.7z

.7z 4.6MB
Rte.exe

.exe 4.9MB

Rte.exe.7z

SHA256 a0f84dddf803c5edb0a9e67526089650240a8947df243e43e2ecf19b549c41c9
MD5 136a58671e32a43efbf3c4092c5db818
SHA1 9c5787b2edb5e9742ca4d67112c1d557c2169e76
SHA512 75238961ad149507da7fd8782b15b482300059ae0334835402f618bd1b576f93abc1d9007ffe874e40d448b72299aeccbcb3318d57bdcb1723cbb373ae25a89f
SSDEEP 98304:p+UhfZ3Iji0Jhotqst0ndjsBiuWieZPFh5KE8kiqszt1OBWVvTc1T6gY9:NB3Iji0Jhot/t0djuiuZeZ/IkiqsznOE
TLSH
T14726336F2441F3864630963016CB95CF334C45DC3A02F99B29385BF99EA3A7DB542BB6
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

Rte.exe

IMPHASH 11053fac8fc1c160504b7e75b64f64db
SHA256 305ba16025064485548edb35da0fefdf347766ccfc2c1276eaef8bcdeb945fd2
MD5 6feffc4807eada02fa97e24ffae81f74
SHA1 2984898bbf95a79726f135adc0d176b3720fbb57
SHA512 a86b81fffedff3513b1fb943b35beeb35a2fb216f5525bbea74f9f4941c719f24089ceb069bca319bf40469b592204a089411fb130f6c3596367894af108c352
SSDEEP 98304:8ZRxICPXGMDi0ZWWnbrwa+EzPuSdGehEtCvG8dqAaYK+HiP0K5T7DMGt0:ERWCOvoZnvZzPu/ehEIO8dqAaYK+HP4W
TLSH
T1CE362306889D8496C41E817F44DD5F3B6EF5D96D1802EB1ABFE48FAC2B43280FA74527
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

22718

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Rte.exe.7z

Rte.exe

kernel32

user32

advapi32

msvcrt

generic

Sharing

General

Malware Config

Signatures

File Explorer

Rte.exe.7z

Rte.exe

kernel32

user32

advapi32

msvcrt

generic