SevenRedCodeDotnet[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SevenRedCodeDotnet.exe
Size

29KB
MD5

f98b43b877e20298ab40d04a5cdc5fe2
SHA1

51708ba52f3e62d21ae47e9cf902849adcad63f8
SHA256

2cbb6ba99b2d3487a893920d06076010d3816bf7c8f28002696537353a4a2ba0
SHA512

7f5d98381c40b200c30f19a91096f7ec93283869afea2e85061892b2c0d63dd0b9b4cfbc04a1a910d97a46a8ee5ab6ebab9b22d412c43eaf251559bfcbaf7cfa
SSDEEP

384:oSREKEqSxXHUyDIEfYgRzbjvCcyorF6HgrvkjvcK5MkqvYi1NBxl4XNrB4nn8q+Y:oE0dDZfZRb3LznNClWnx+hRg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SevenRedCodeDotnet.exe

Files

SevenRedCodeDotnet.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

SevenRedCodeDotnet.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ