Deluxe RDP_@K666Plus[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Deluxe [email protected]
Size

337KB
MD5

cb5dd718c56545bcf47e97b296c48922
SHA1

4da189399a95ced4e081cb5fd4d65517e6427e00
SHA256

34b1604d749e3588ed90544e00d1769d04dd3f252a7604dc227c7e450c224e29
SHA512

877808603d71c634aafbfb61dfaee94b1f03f623fbcf62339a4eb15d67b40c112f8adcf002d0f02863a4e7edafc01ed1538db50d7329bd095197c20652666d72
SSDEEP

3072:HNxamrwz/wwGu/K6eKekrOxPRakF9GdsJD1TgOuiyqrC8FilU0yjlCwRfLrOxPRJ:Xrr+trOOkzGWRM8n0mrOOkz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Deluxe [email protected]

Files

Deluxe [email protected]
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 237KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ