RDP-Spot[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RDP-Spot.exe
Size

15KB
MD5

93d99dbc10c1a12105c1c9e3aabcf787
SHA1

d35fc45f9eedc832d34bb094a0fc65bbda32c41a
SHA256

7d29a89c0966209b5c206c301e03079906401626c9b38560abafbca06f1f9f02
SHA512

015973d576377ccd5689f1ff039e0cf614bdd5d3300ab078561cfb5fcab3048b516fc5d1a51334c08e9178b431f1693942d9e0542bf577fd987c730e0d3e3c7d
SSDEEP

384:/SknKZSYrsFq3YBN+hrtrswyO/VxF7Fh5jk6kvwKwq6ulBG5UL2de9:ersFq3YBN+ptrCcVBwDqUCk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RDP-Spot.exe

Files

RDP-Spot.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\OneDrive\Spot\RDP-Spot\RDP-Spot\obj\Debug\RDP-Spot.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ