RedByte[.]A[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RedByte.A.exe
Size

4KB
MD5

b9b3cb23d113fcf00831306ebcfba789
SHA1

7b8ea999281b41cfe3fd86e9deab4ab7e6a3f81d
SHA256

8351b47f5b1839fb8360caf688c19fa0a912bd123455730de100a47e3097aee2
SHA512

65d1ef8d7f6405feb65ad1df44b7d574a398413894899fc832f0d403d44d5abb50f9d79bfdd53f56b97d2cb2799f6536ef85125ae668426239eeeb7c2e2a57da
SSDEEP

48:6qZ80XD/8nZtzznZsXNclhaIz0a7mMbD5Z8qyWiIqUwO9qK01W0XIS:PJXz+7gIH7mSD5Z3HUKS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RedByte.A.exe

Files

RedByte.A.exe
.exe windows:4 windows x86 arch:x86

815e1ba56e855b07daa7197697b159cd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleFileNameA

Sections

.text
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ