RDPChange[.]exe | Triage

Sharing

General

Target

RDPChange.exe
Size

96KB
MD5

14471958bb32cc5722ee0ffd56c11ed2
SHA1

9fc368c4535af1c5876bfe7d70fe12db140bf66f
SHA256

940f186a0037a560f77f458621c8f9fa66e3a4cbc8d5a17d6a8de35ae5d5d5da
SHA512

20a2b596c644a5734923feafec963200137201f0ecb144db8798d278b3122ccde39723b64f865b120eb72eff236d2c891d9fd4d1ba45811073cb73abdbdaf59e
SSDEEP

1536:MB5rBq8A4w46dnXftAzh0/1qKncM2BI2kdcrBq8A4w46dnXft:WBXA4w46de1CoBrkd0BXA4w46d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RDPChange.exe

Files

RDPChange.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ