Z:\Axon\Axon\Axon\obj\x64\Release\Ro-Astral.pdb
Static task
static1
General
-
Target
Ro-Astral.exe
-
Size
370KB
-
MD5
9ca21fd740145ca7d67915cc390c4795
-
SHA1
f180016183bdb2ad9b99c91af81eee70ea73b337
-
SHA256
1c23cacef1f22e3f5cafefea56bc4edf525f04ce5199ce78029a59954f07627b
-
SHA512
cb8a24b710e97813d50b49bb06da49939684266cd1ac121aa67696be46a8e738e9eb53e27069375ec23b2bed9c105889be5387b77c13b7f8038cf13a20d735f6
-
SSDEEP
6144:dL4/uBSakpB1fvFFagqhPlRPGQ2VSpSrYiF6Dyfczcje5RL5XrsKalxsoo0KKV:dL4/SSrtfvGgQ5BpSucecK5HscoPKK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Ro-Astral.exe
Files
-
Ro-Astral.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 368KB - Virtual size: 367KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ