osu!rx[.]exe | Triage

Sharing

General

Target

osu!rx.exe
Size

34KB
MD5

2c2d8f13ab0d5c83114ebe81b679399c
SHA1

5cb00a17ce556f5815313cc137ac59578863e97b
SHA256

a7f4d3435025c2d0ed20f9d2b03a388da36e7cf86a4d8fb36f90057e34dd51ec
SHA512

d5751ecd95499ce7ae828471fd591548b841eb7a63c5d33a7af7a62488be0562f3353be9569ae7fc99e92583480fd116f2fefed5c9b21df4ac87ae4f03a371f4
SSDEEP

384:PphPY/th++XghxbQkUCn9vjyKAXa4krDIAGhuFCXZyePz/qkgst1jOXeHtHa:PpB8+kC1qD23GwaZyeP1jOOH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
osu!rx.exe

Files

osu!rx.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Flash\Desktop\Stuff\Coding stuff\C# stuff\Visual Studio projects\osu!rx\osu!rx\obj\Release\osu!rx.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ