SimpleRemote[.]exe | Triage

Sharing

General

Target

SimpleRemote.exe
Size

2.9MB
MD5

29a7ce5449119f02ce1528ab1aadd062
SHA1

0792bc8b3e269a5fd4a6a1b469e4cda434f8bf96
SHA256

daca8483024fb1667afce8f54ad60cd2a0f3c70f8d950bab28077df4afcacb85
SHA512

2118672db8b35e37e8058fecbc574549217c6e00979cf75b4a18da289b71afc9562d28a9a5070a0ca38fbf703c34157230766b2933790fac5143e19e8fc6d337
SSDEEP

49152:/brayUHyQqqO+ZFGaCGYhmoqSVp6Ir3VLLPaQdkAkmt8XZ:qtHKqO+TlCgzapRrFLLP59t8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SimpleRemote.exe

Files

SimpleRemote.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ