c:\Users\News\Downloads\SourceRcon-1.1.1\SourceRconLib\obj\Release\SourceRconLib.pdb
Overview
overview
6Static
static
3rcon-console-v0.1.7z
windows7-x64
6rcon-console-v0.1.7z
windows10-2004-x64
3SourceRconLib.dll
windows7-x64
1SourceRconLib.dll
windows10-2004-x64
1rcon-console.exe
windows7-x64
1rcon-console.exe
windows10-2004-x64
1rcon-conso...config
windows7-x64
3rcon-conso...config
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
rcon-console-v0.1.7z
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
rcon-console-v0.1.7z
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
SourceRconLib.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
SourceRconLib.dll
Resource
win10v2004-20240704-en
Behavioral task
behavioral5
Sample
rcon-console.exe
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
rcon-console.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral7
Sample
rcon-console.exe.config
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
rcon-console.exe.config
Resource
win10v2004-20240704-en
General
-
Target
rcon-console-v0.1.7z
-
Size
29KB
-
MD5
2c55a0be8afd9e294c93e0f8aee038e7
-
SHA1
964e1dfeee7be59a3433f338b7b32a2b814f1c12
-
SHA256
8972d8bd1b06281d98b5878bc2bc42a7fab6e913b8abb8d97a4154bfd45c7cc4
-
SHA512
560340de5c60268a6b6fb6d39f87e568bb5e24360fec66abb4944a214cf74121b49e8553a47a1b7c0d160224f8a7b90a23e2ec9352521800d391409982810d64
-
SSDEEP
768:u/DjmRUfRldVm/sq5UR55k/vMZyAh8+o0nZgqjaoTG:HedVmB5UR5MMZzhcqjaMG
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/SourceRconLib.dll unpack001/rcon-console.exe
Files
-
rcon-console-v0.1.7z.7z
-
SourceRconLib.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 808B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
rcon-console.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
c:\Users\News\Documents\Visual Studio 2012\Projects\rcon-console\rcon-console\obj\Release\rcon-console.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
rcon-console.exe.config