nix-rpc[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

nix-rpc.exe
Size

1.6MB
MD5

f75a86926cb74e3a5cf22de2e606a5d8
SHA1

2199c06097a332ce39154a1eab66a9fced2dd131
SHA256

ebca593f45a9fadbbc8f5d077980f9b69b3fcc6ec9cffc3fb63ef0500cd0752e
SHA512

fcbcc4b943e4ef80457a640377f1c81a02c9ee50c6402611805168903444556e984925eb62035db9dfc0324a41bda7a5b2b3fbd131fee502cf2e40c00d494fb3
SSDEEP

49152:IHGwXhTHGwXJX3HxjO9+w+W7SCSH8LNw/rF73cJqs8:I/DHxjcBIcLNwDF7sp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
nix-rpc.exe

Files

nix-rpc.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\__Main\source\RPC\obj\x64\Release\nix-rpc.pdb

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ