RTC_Launcher[.]exe | Triage

Resubmissions

08-08-2024 02:57

240808-dfn76ssdpb 7

08-08-2024 02:55

240808-demyqasdnb 3

08-08-2024 02:53

240808-ddtd4ssdmf 7

Sharing

General

Target

RTC_Launcher.exe
Size

758KB
MD5

cb1929328dea316fcb34f3486697d16e
SHA1

8c2db8d4b4644cb356a9283b2fa7bb6a988a5d7b
SHA256

7a3deffc327b1e49cbc95dc4c41f1f4c0fd55825cc7c18fd06b96a900e0bf5f9
SHA512

90ef1cc19c01c1c0b2b4b802e88d622ff07ffc91273350200cd0589e6acabb63634af2883f6cae554dacab0f401b4294d13291707507c6fa035c282214fc6a28
SSDEEP

12288:qOBl28ZdfrXg+JwuKt/S/605bsrv0QXIRHE:zfw+Jwz/S/6Rv0wUk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RTC_Launcher.exe

Files

RTC_Launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\philt\Documents\PROJECTS\RTC-Launcher\RTCLauncher\obj\Release\RTC_Launcher.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 653KB - Virtual size: 652KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ