Runtime_Guard[.]exe | Triage

Sharing

General

Target

Runtime_Guard.exe
Size

281KB
MD5

6fa06c72bb8d98c008d5edbdbe128357
SHA1

35a93106789384b1327d0021a222a732189996d4
SHA256

bc97628b1daf07ad72eef635fd7ff2609f104540aecbf5e101c51261053c384c
SHA512

0f1f2d841477c1abad93989aa217faf66c65003e3772f3dc43bf60f707a1c94cb9ad91dec9cdc57764047b98850c2b6e27289f01c25cd846e8bf660c1ea36bb0
SSDEEP

6144:OvpWB0OR2WYihjHRIb4OAUQmuZ5GsE0HVf3R3:Ohs0ORJH2ALmuZ5GsE0H33

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Runtime_Guard.exe

Files

Runtime_Guard.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 275KB - Virtual size: 275KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ