7b572a92bb2b99f1e7329f08469f79f6 | Triage

Sharing

General

Target

7b572a92bb2b99f1e7329f08469f79f6
Size

491KB
MD5

7b572a92bb2b99f1e7329f08469f79f6
SHA1

856e8dd0873309ce538edf8c3b7cf24cb57dc999
SHA256

8625d76b98dcbb75c19dfcbd9d2d054d42a144d04dc026ee9ec237242ce237a2
SHA512

d12f6076b4e141db53c8d0694a318b22fa6266ff2901f4663bc2e3cb3d78ba401195716a8383d639cdfa5944d4711384c1341ca9d03087fa4c1b1ccda8935d12
SSDEEP

6144:gVpz8h8OG95o61lYkvvA3s9eDQAJmfXLAtcm39Ztun7az2+jzp9KM2T8:g6Cg61ikvvA3sXT87keac

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b572a92bb2b99f1e7329f08469f79f6

Files

7b572a92bb2b99f1e7329f08469f79f6
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\documents\visual studio 2010\Projects\RS Stealer Sources\RS Stealer Sources\obj\x86\Release\RS Stealer Sources.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 190B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 404KB - Virtual size: 403KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ