ActiveDesktop[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ActiveDesktop.exe
Size

1.5MB
MD5

6e45e5ed2e5052462fb1f9e8b44a3fe6
SHA1

0c1f099b919ca254ec43ae5cf9d572e6d3aede65
SHA256

2bb99ba5a6e58d8a084364e385531d660af99fb5cb65231eb187d7d30c115c8d
SHA512

b9433503eeecb428f55ca808523009e9b4c5f76d34f308c63957943932b778bfd9c4ec511ddd568e4bdb9a96f97980566346773acfb1c82e9401c1127197285a
SSDEEP

24576:65187FJK3O8S65j7JJ/i9iCfAEJp3LcvbuhZUTd03fCNytQILlI185:65187PKe8SCj7b/oFWbMKNILlI18

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ActiveDesktop.exe

Files

ActiveDesktop.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\GitHub\ActiveDesktopPlus\ActiveDesktop\obj\Release\ActiveDesktop.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ