real_goldcore[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

real_goldcore.exe
Size

2.6MB
MD5

8bc3e34e616472f9760cb7b1cfb7b7cb
SHA1

583c612dbd49f92e4150266778b74fcf1fe542e9
SHA256

2b1086d1cb33bcb03d5fffeea77aa3d005b9c3db3559a3c9ff5b50434a6e79b2
SHA512

726f5779633d4d86558c158e205000ce3b9496a463047e9ff25d350a6d79de8a85bd2faa8bfe2160892373b1df452fb7530974111c967b2158ca0e8b17c0d765
SSDEEP

49152:1ZtXe/vpImCA5TrNTvc2L8bLqCE/4IG8VlJlhMhG2+ezONLDjhgp8o:1DypN9RZTEe8bE48VlJqG2+eap9g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
real_goldcore.exe

Files

real_goldcore.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ