ImagingDevices.pdb
Static task
static1
Behavioral task
behavioral1
Sample
77bb973b1b680a8434240143fe8f1b0a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
77bb973b1b680a8434240143fe8f1b0a.exe
Resource
win10v2004-20231215-en
General
-
Target
77bb973b1b680a8434240143fe8f1b0a
-
Size
3.9MB
-
MD5
77bb973b1b680a8434240143fe8f1b0a
-
SHA1
45e0cc19e4e6dd3d2a4a6befb085167a027a0247
-
SHA256
d48988f212ad3bfd71fe59e14aecf4bb079fb3ccbec23ae3d9c4ddeefa64a619
-
SHA512
303aae9457a39aee1e8af754e0352448c8099939b6761b30029918afb8c9aa100edd432e2235a979051943347ec7b72045336d56662c3d28b4a7b86d3fefca19
-
SSDEEP
98304:UVskVsxS3P/eUJF3noxDUsNi9XwgwfoxqnstLEv:Ms8so/f32Hi9XwgwAxqnh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77bb973b1b680a8434240143fe8f1b0a
Files
-
77bb973b1b680a8434240143fe8f1b0a.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 240B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 280B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ