RosePrivateTracker[.]exe | Triage

Sharing

General

Target

RosePrivateTracker.exe
Size

155KB
MD5

6afd2e6b7403e88508a33622e0d82764
SHA1

12a7b51e919364bca99948ca4a8f409bdd677c96
SHA256

72b23359c459b85c2ec141c65e5a4207336b28fb9a75734cd0ac8620988a187c
SHA512

022853e97fbfa135cc998d72b55b1edfb308f38a7d1080f9439f945139cfe0b4f257d7e5eb7b6eb6e0b176ff46cbab5839a3e3f354c06671b6976dfe844827c2
SSDEEP

3072:1IU2DNYZcRqKO9l7HXcKL20zHXcKL20WVI0lt/6pMR8ALHXcKL202:1IUTZYO9l7Xc0jXc0WTt/JXc0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RosePrivateTracker.exe

Files

RosePrivateTracker.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ