RestrictedAdmin[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RestrictedAdmin.exe
Size

8KB
MD5

5ae32701409556ac4fcfbf60add54b42
SHA1

0231e81b4c87dc285041b156d0a39e7ecbca1d70
SHA256

82d928d11cf196ff44a3df55343eb397c8fe16212a1a6a650e5b9ede12f88549
SHA512

861e58a2c441eceaa6a9b40633acb18c0c7f170040cad3eaedf0f65cfc49239ae8a84a3a4842fcb9ff06b62ec6527b36813e3dad3347d6cd8568d59d54cf2bd8
SSDEEP

96:X1w6zoz9uzy9tNxu7H0pH6+xBfkAKpc1GepFYRZQ6ChCtfGjGBzNt1:lwEORTXmHg68fkLepCzQFhCpSGDz

Score

1^/10

Malware Config

Signatures

Files

RestrictedAdmin.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ