RDPAccessorV4[.]exe | Triage

Sharing

General

Target

RDPAccessorV4.exe
Size

21.2MB
MD5

bd36df9833732a95ee1c49688912f8ae
SHA1

fea78c7cfcf4a0038f02a9e54a74a728d19dacbd
SHA256

ddd3d4845c1793d54c69eecfde7fbdf29ebfa246b05fb5350899ccaa9a607baa
SHA512

7a7faf3bada6b0873616116173bbd32703a0c0176edc2b8c3ce1bf2e7195193587753f403bf921183b79278e7d0bb5e51aecfa62910e44d155b91f4388002519
SSDEEP

393216:2EygOPmCjPpY7tzSoaS5Bg2/k9Q4sUiZRlDbeibaDZf6ycplTbcBEJrYNX4LqL2p:2QpgPpqSS5zk9XgZr9qt6ysRAUYNILk4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RDPAccessorV4.exe

Files

RDPAccessorV4.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 21.2MB - Virtual size: 21.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ