ConfigCSALauncher[.]exe | Triage

Sharing

General

Target

ConfigCSALauncher.exe
Size

48KB
MD5

6ba7075b61249affe011b8ebd0864e2d
SHA1

8b4cca8d0b26794e4cad759d5c78b824c06216a4
SHA256

900a73036495af0266364504ca7e4593653b47fa66296f943b908060bd1419e8
SHA512

95fa87c1e81013466efd4c9525b2b29e5c3a0d7e80944df5e2e682862660f669121fb5c49bba40887513bb54f11ac197b5dda79f914ed2e8dbeff0099b332c2e
SSDEEP

768:yGTTcourbqycPFRQv7USajsP6bm0hryAtALAonYcLMR:l3YrbHcPFWv7TajsCphbtALAoHMR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ConfigCSALauncher.exe

Files

ConfigCSALauncher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\User\Desktop\SRC\NewConfigCSA\ConfigCSALauncher\ConfigCSALauncher\obj\Release\ConfigCSALauncher.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ