Managed XDR

remote-access-windows64-online.exe_icon.exe — malware analysis report

File info

Filename
remote-access-windows64-online.exe_icon.exe
File type
PE32+ executable (GUI) x86-64, for MS Windows
File size
1.6 MB
First seen
Last seen

Environment

w10/x64 en

Hashes

SHA1
6fc7aade49da2ef2a2cbfd3a482eacd478d75fcc
SHA256
56c78b99679bef5204446ab6c5d37f3c4de8806c3f71944a78c252591d947e83
MD5
74484396560e6e10b6a8c9469e37bf54

Signatures

Defense Evasion

T1027.002 packer_entropy: Probably contains compressed or encrypted data

Other

yara_rules: Static rules
require_administrator: Requests administrator privileges
suspicious_network_port: Performs TCP or UDP request to non-standard port
pe_overlay: PE file contains overlay
ce_info: SimpleHelp Configuration Data found
valid_authenticode: The digital signature has been verified
Managed XDR