Automatic_converter_rff_to_mp4[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Automatic_converter_rff_to_mp4.exe
Size

322KB
MD5

d3686a0c5829c91c24191d70fab4fe0a
SHA1

3a591cc143670bce06059b187ddeb97dd09dccf7
SHA256

57217f069a6d05d6ae7a00559096619e6c8f907d0df6bc6567b9c6653f27141c
SHA512

49ce711f193e0d5155c32b30bd4e0933a71d61cc4959367891969c53e9c36814b90c24059f87508918d0910d97199a2853a60d908ec7ed56cb35bf9a64e1f9a1
SSDEEP

6144:AibFlHNEHBpDDf2vfQ21NV0zUiCqKjH6YPON9q:AYtCpPfGfZSKPf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Automatic_converter_rff_to_mp4.exe

Files

Automatic_converter_rff_to_mp4.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Worm\source\repos\SysWOW64\SysWOW64\obj\Debug\Automatic_converter_rff_to_mp4.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 185KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ