RossoLauncher[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RossoLauncher.exe
Size

5.0MB
MD5

399ac7157bf26a41e48319a8c892e9d6
SHA1

d885ebbe1531a3ca6320eff9dae59de50e69920e
SHA256

a41affe063b73fb1c2f7669026df19c79d8ff129d6c0d6145e20b499ca09b48e
SHA512

71c602743dd632a57359f59f47cf251008473849e5745e219fe71c07f86916bf0d8a0b069a968bf23bd0e25e5091e9d10f974066fcb790af9b1a1ca8070cb3cd
SSDEEP

98304:Mk9IuToPLIDxRe/FBcC7+jYalx40FihARlx4:pI1PLgcKCijYalx404iLx4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RossoLauncher.exe

Files

RossoLauncher.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

cEDx>
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4.7MB - Virtual size: 4.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ