Rbx2Source[.]exe | Triage

Sharing

General

Target

Rbx2Source.exe
Size

8.2MB
MD5

2b83a78eb7a9b2b170f3c6f9dc4625b9
SHA1

ec53430afae6bdc2251d70a9741b2550919fd1f4
SHA256

43298ca3117a32a1081009466e3b006f106d53eb6ab1de6f9dbf2fbd67a68cc8
SHA512

fc711242d522d220e62de1f980203620035747b47e2ea9ba2875ce191fbf23fa265d17f395ee0139df109e3e971198718ef5829a69734b2f293856ce0865100a
SSDEEP

98304:Z0qIiAdex4Wyg5hLerqDeX0wjgw8HQD22wEQjGkqXf0FQtH8:Z0s4QvfaEwjgw8HQD22wEoGkSIQtH8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Rbx2Source.exe

Files

Rbx2Source.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\quinn\Documents\GitHub\Rbx2Source\obj\Release\Rbx2Source.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8.1MB - Virtual size: 8.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ