C:\Users\MasterHyp\Documents\Visual Studio 2012\Projects\WindowsApplication5\WindowsApplication5\obj\Debug\WindowsApplication5.pdb
Static task
static1
Behavioral task
behavioral1
Sample
79f74fb01e2f31de08bc94ea26dfbfeb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
79f74fb01e2f31de08bc94ea26dfbfeb.exe
Resource
win10v2004-20231215-en
General
-
Target
79f74fb01e2f31de08bc94ea26dfbfeb
-
Size
492KB
-
MD5
79f74fb01e2f31de08bc94ea26dfbfeb
-
SHA1
1466ae1bd719c4b8e28199b494674aea37e63a90
-
SHA256
a5974c4e9051b1955fdf0b41b6cc1b2f807372987f664110a47cbbb3ab6bbaa8
-
SHA512
83d6aa02190ce7364de6e0893b9ee3a5a7f3342b8750d44cbefaba70d1369a43dac478d901da31988f1ece8a0dea0a54a69d5a57f35f87f4c9e6084ce06ab9cb
-
SSDEEP
6144:P1hLq7U6gkdySLwhhP+91Dzshv/54V4w2yEdve1e/nyvdkyh38kRoOnrd5iAV:P1E6kXLqK18t3syvEJvv3i4rPiW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79f74fb01e2f31de08bc94ea26dfbfeb
Files
-
79f74fb01e2f31de08bc94ea26dfbfeb.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 478KB - Virtual size: 478KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ