RoAStralPAID[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RoAStralPAID.exe
Size

119KB
MD5

c1bca5c5fd45e61d6b888eb2396f5cf0
SHA1

323d7d77e5c93cdd2f948314d48ec2b4a254df1f
SHA256

ec2d5adeb9b9d5073981724902b3e11dd3ec740f13b7fba48982e5bd12df7296
SHA512

fbf503ee524bdb3301052de07d50a7fec8c991c75a22c4374c009f64d89f497592c256862e0ed41e8bbc50b7f3370c97fa9e4b730c66e5e43b4146cede37d5aa
SSDEEP

3072:j4CzJhTOT70UjAy2J5rFbzex81WUnDJ07hNxdZB/Of/u8nDJ07hNu:B9VOToUjAPrFbzf1WUn4DdbWHu8n4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RoAStralPAID.exe

Files

RoAStralPAID.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Flami\source\repos\RoAStralPAID\RoAStralPAID\obj\x64\Debug\RoAStralPAID.pdb

Sections

.text
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ