home

rconfig.exe

BatPost

RITLABS S.R.L.

Publisher:
RITLABS S.R.L.  (signed and verified)

Product:
BatPost

Description:
BatPost E-Mail Server by Ritlabs

Version:
3.01.201

MD5:
2382210bed7a98a397700832b64ca26f

SHA-1:
9346a3738ce7de4da19245abd5a74856bf0d6118

SHA-256:
be5cbd58d8a8596e84c78e089e6f5b114498bd9ffb6f2ebcd641c15b517af50b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 4:41:59 AM UTC  (today)

File size:
760 KB (778,232 bytes)

Product version:
3.01.201

Copyright:
Copyright (C) 1997-2013 Ritlabs S.R.L.

Original file name:
BatPost E-Mail Server by Ritlabs

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\batpost\rconfig.exe

Digital Signature
Signed by:
RITLABS S.R.L.

Authority:
Thawte, Inc.

Valid from:
8/21/2012 1:00:00 AM

Valid to:
8/22/2013 12:59:59 AM

Subject:
CN=RITLABS S.R.L., O=RITLABS S.R.L., L=Chisinau, S=Moldova, C=MD

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
39F5849F5E8EA79588C687EEE9368E89

File PE Metadata
Compilation timestamp:
6/19/2013 11:25:25 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:YAsTxiA+oVNOIeZtLhDgepN2CWAO70p9oIFQFK1yAjQbzrGBZkQ9K6b7MP+Dd2Fx:xsZ+qNOIeZrLJVoI51y2ZkQ9r7MP+h2z

Entry address:
0x1000

Entry point:
68, 01, 30, 64, 00, E8, 01, 00, 00, 00, C3, C3, 6A, D9, 8D, D6, AD, 46, 08, 76, B9, 96, 88, 08, D7, 7B, AF, A5, 44, 4F, 53, 3B, 04, FD, 39, 12, 2A, 3C, 8D, 9B, 43, 85, 17, 1E, 54, 75, 6D, 8C, 34, 62, 3E, 50, 54, 31, 18, 59, 59, 34, 29, 7A, EF, 84, BA, 88, 7A, EB, 7F, 27, A7, 99, 2F, DB, E4, D3, 04, DE, F5, 20, DB, 7B, F6, 50, 1B, 2B, 62, 5F, 64, C1, 89, C8, CB, 8C, F4, 2F, AC, 75, AF, 72, 35, FF, D2, 08, FC, 97, 62, 75, E8, 43, 5C, 91, 21, B3, FA, 2F, 14, B2, 20, 9C, 62, 9B, F9, 1B, B4, B9, BC, 03, EC, 12...
 
[+]

Entropy:
7.9693

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
1.7 MB (1,737,216 bytes)

Scan rconfig.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.