CustomRP[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CustomRP.exe
Size

1.1MB
MD5

8c162bf94f6c4035eb74403ca9a3af44
SHA1

419cda75ef1d6d8ed848987caf7ede6a4b6a5587
SHA256

fbfa452cad984ee91ca3957bd9a99a1874932065d06bd6a94e9c49f2b9f57ada
SHA512

fc52420590f55b192c35e1300353ddcfa84304cc7e575e88492e63716fdc816e8a4f62879f93142365dbfa1b56170495c40cafff0ef96b717890710542a09104
SSDEEP

12288:VpB3oTv2qdPDN+3wdiUv4s19MatB5l2dD0A9cBgAFvGmH:fK3FvGQ

Score

1^/10

Malware Config

Signatures

Files

CustomRP.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 544KB - Virtual size: 543KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 615KB - Virtual size: 614KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ