ROTK Trace Scanner[.]exe

General

Target
ROTK Trace Scanner.exe
Size 47KB
Sample261011-ragg2aah27
SHA256 b24114a6f78dfa1b9b8549ce3e68b319386e4f5782e5b3a72d8d0b7afaa49774
MD5 622d0bc3c573c268aecb406e80a84845
SHA1 19629abf24614082a9cafe37b64e6aca14d226dc
SHA512 dcbb4a27db5654845c8d50b65645bc636270c1050205f1b6d979973c6d4fdafd27dd112dd4dc6ef2e23435ea510e536079f4a6b37499006f8485400be4b85200
SSDEEP 768:0FX/KEIyZxPLQeyZpZX7Yvaq1Q0gKn+Yi0SGIhNmICAER0EAW:0FPKEFbPLRyZz7Oy0gKn+Yi0SGIDmnVL
TLSH
T12523714173FC8215FAFF6FB968B111144EB6BC6AA939D79C0995009E1DB2F40CDA0B63
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ROTK Trace Scanner.exe

File Explorer

ROTK Trace Scanner.exe

.exe 47KB

ROTK Trace Scanner.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 b24114a6f78dfa1b9b8549ce3e68b319386e4f5782e5b3a72d8d0b7afaa49774
MD5 622d0bc3c573c268aecb406e80a84845
SHA1 19629abf24614082a9cafe37b64e6aca14d226dc
SHA512 dcbb4a27db5654845c8d50b65645bc636270c1050205f1b6d979973c6d4fdafd27dd112dd4dc6ef2e23435ea510e536079f4a6b37499006f8485400be4b85200
SSDEEP 768:0FX/KEIyZxPLQeyZpZX7Yvaq1Q0gKn+Yi0SGIhNmICAER0EAW:0FPKEFbPLRyZz7Oy0gKn+Yi0SGIDmnVL
TLSH
T12523714173FC8215FAFF6FB968B111144EB6BC6AA939D79C0995009E1DB2F40CDA0B63
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

53294

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

ROTK Trace Scanner.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

ROTK Trace Scanner.exe

mscoree

dotnet