797fa385548a88e55ae5a1f67026bc0f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

797fa385548a88e55ae5a1f67026bc0f
Size

33KB
MD5

797fa385548a88e55ae5a1f67026bc0f
SHA1

9f582bf5e46fbbb86af37830a594d10f402d7907
SHA256

915caf575fdbc904c0d5a3755135545f76b81bf633cdac3c98b85bd0ab76dfb6
SHA512

190d43028d6d71a904c119d11418a3c27dafe05868641284189068d1d06049fb98f14ae023997802c8fe84fc95344de9cc101a4cac50947abf13eea116b0fe63
SSDEEP

768:73nP5Cp20VXSXZ1XjHkut9wIuyTD0GU/yCSlqFmHyWtO0+xT:73nP5CbGZ1XQu7fuAD0GDCSkjhzT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
797fa385548a88e55ae5a1f67026bc0f

Files

797fa385548a88e55ae5a1f67026bc0f
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Z:\HorusEyesRat-master\Client\obj\Release\Stub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ