I don't see a listing of the RSA encryption function, but encrypting 1024 bytes with RSA requires an 8192 bit RSA key, which would take a while to generate. Nor

I don't see a listing of the RSA encryption function, but encrypting 1024 bytes with RSA requires an 8192 bit RSA key, which would take a while to generate. Normally, one generates a random symmetric key, encrypts that with RSA and uses that key to encrypt the file. If the malware was doing that, why not just do it on the whole file? It wouldn't be any slower. They may have hard-coded an 8192 bit RSA public key, or they may have some stupid weak RSA key generation scheme.