Rtd 0000011111[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Rtd 0000011111.exe
Size

689KB
MD5

c4d61f1c2401a1ff8ada071ca59c0154
SHA1

9477b7474de2b08bd9cdaed098a07038a2a7b77a
SHA256

26f2de44cd4e8b377c64aab82b1352bffe6329a7313e1ef70ed4979ff46255a3
SHA512

8539727bb47d40d73303e6f4dceccccd97e4d021ee91d775bda1ce8e0f23c9b1069210ea47511a2bb17c6644ae9af9266728ac45481c19faa6943f9fb73fa15c
SSDEEP

12288:eLlL9bW9eznNCJu+sSnCvvV2PDQkMaKSlodAa1/CavhX8KKvivYXTB1nkqezlS6H:eZL9iyNCJuJSnqvVWDQIK7C8/CavhX3u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Rtd 0000011111.exe

Files

Rtd 0000011111.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 680KB - Virtual size: 679KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ