ConsoleApp1[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ConsoleApp1.exe
Size

433KB
MD5

fafb848b1ae54e96b6c6a62ad1a65cf1
SHA1

bd8e126b78974a74d7beb310639fadc3e9105990
SHA256

487ac76e7a243e9e8a64301f22bbe8092df9b5f900de59c876be95afb13f2ba8
SHA512

91ad0d5d09dd26541c987fce5f74ccae49f5e14eb768af2af0a3f1c16f92c42b68a3a73fe72bf254d7ee45941d1e01f00c3d4805f50941f924ff276545dcc195
SSDEEP

12288:SkqjVnl36ud0zR/6CtQ9PUHIG8Dnug4jOh9:SkqjVnlqud+/2P+Aug4jOh9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ConsoleApp1.exe

Files

ConsoleApp1.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\LocalRootkit\Desktop\Solutions\ScorpionRat\Client\obj\Debug\ConsoleApp1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 431KB - Virtual size: 430KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ