repidclass_config[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

repidclass_config.exe
Size

124KB
MD5

78179fa558e4d3b8323a58f74bddd65d
SHA1

5c1284b4ad26f6a9a01001bb939e726463ee6707
SHA256

f4094d47ebb1491a09d6ad128caf20eeea2c4a6beb77df00be52290abbba484a
SHA512

19ae0cc4e4fe5023e00bad66bb5db229d756ed44a112ee6ae73bc3cf9d5d554586667b57042fb60ed0a6ede961f18b2bb39e116fa8866b40111a4d2f61796278
SSDEEP

1536:KRwfH/5J/ThUtAYhLNhsKzG5Urgdb0gdb7Urgdb0gdb5L/cU1gdbUgdbH:QwX5UtXphCdbndbJdbndb50dbHdbH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
repidclass_config.exe

Files

repidclass_config.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ