rContractList[.]exe | Triage

Sharing

General

Target

rContractList.exe
Size

684KB
MD5

a1f6d8695eb3ea40a59178c930235e76
SHA1

ed59df0ace545909708b0c4cc73e94e9cdd373c3
SHA256

b929a79e7f384cfa09b8af478710f6e377b81bfe01ac88716c87b09f11dedb79
SHA512

bd50d88a1908cc8283b6bb1d6e5d2b2b7fe0eb35935890285cab6e7317abb284d32fe6bbd8df14d41e7778b3fccbd483b12ef7ad30791835e73b2af36765c124
SSDEEP

12288:QbDzBa/mFiTEJ0+0OR8FCko2gFKzhqD35KOfBqmDcE8V57czD9XyjLb7sz:QP8ggzM35KkxcB57Goj/7sz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
rContractList.exe

Files

rContractList.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 682KB - Virtual size: 681KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ