Static task
static1
Behavioral task
behavioral1
Sample
Pjlbwitnky.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Pjlbwitnky.exe
Resource
win10v2004-20230220-en
General
-
Target
Pjlbwitnky.exe
-
Size
30KB
-
MD5
2dcabf443b7d1abcc0c2de16ecec90bc
-
SHA1
e82d2533f5f7f64f0d15960dcbbf9b5b30d585c2
-
SHA256
1159798d7b0504960fd5b45cf68a8589c9b3d28e56b372a93195dd009cc45f55
-
SHA512
638e4986489be8a850b2991874249995764885232a344be34c2655f79aeb5aff58f674b87d8dc64afd3d9e4992f1843cc2938e493055ac391e387ea181a5dfb8
-
SSDEEP
384:Yt+fcBiL2sQvTNfqMLoLb7HE3/Afi7B02PZpBvgOeHItoUtPx+0HYX:YtJerY7cb7HEvAfS/PZp92fOp+3X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Pjlbwitnky.exe
Files
-
Pjlbwitnky.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ