Arctic External RBX[.]exe | Triage

Sharing

General

Target

Arctic External RBX.exe
Size

28KB
MD5

98ce7381766301417b81fdcee8d118f3
SHA1

d1ccec2ad8027cd584f43a6b79d66307cce86e97
SHA256

07df87e8302927f83d1b39f9674bc7fbdc14a0f549e981612bd45d122c268cdf
SHA512

1d65146c46db7d2c03a5927de3e8fc60666bfe7b193b583cd49d830c91f823a452a571e8b49bd83829ffc7a727eaf627922973b6809cd8cb18df0e8bfa660a16
SSDEEP

384:yHthk9sZK4TXq/RClTelLE/3R0o3/nmS8eC1HlrZtJzq/OdGUGs5xjHc2ZXod2/v:yzu0UNEPRCDrJRLdi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Arctic External RBX.exe

Files

Arctic External RBX.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Owner\source\repos\Main Loader\Main Loader\obj\Release\Main Loader.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ