2eb02fabafdcb8e20b9abc43bf854a130d169341841ba9baaceb828d732d7f58 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2eb02fabafdcb8e20b9abc43bf854a130d169341841ba9baaceb828d732d7f58
Size

3.5MB
MD5

da37ec6347566988b47593c5a5926cb1
SHA1

f6ad3cae63942939f3bef5dc806f4b2947970861
SHA256

2eb02fabafdcb8e20b9abc43bf854a130d169341841ba9baaceb828d732d7f58
SHA512

1368a16ad9d95923a7739911b1ea1b0442dc5c851288769ee67fc80c6e112a1ced69dfe8c886ba3ec2b82aecb67fe5b5bbc012200923a3c698fb6e55ec068df9
SSDEEP

49152:UhQbce+jzoIGLLyMrZ4wPJkyMvaDgNdbh2xhSdJ:NzLy64waaDUH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2eb02fabafdcb8e20b9abc43bf854a130d169341841ba9baaceb828d732d7f58

Files

2eb02fabafdcb8e20b9abc43bf854a130d169341841ba9baaceb828d732d7f58
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\a\RX-Explorer-WAS\RX-Explorer-WAS\RX-Explorer-WAS\obj\x64\Release\net8.0-windows10.0.22621.0\win-x64\Obfuscated\RX-Explorer-WAS.pdb

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ