YmFc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c0171b6b9b52a7a321e72f715e975fd8896835a342bd0e76ef4e4e3c10d3d872.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
c0171b6b9b52a7a321e72f715e975fd8896835a342bd0e76ef4e4e3c10d3d872.exe
Resource
win10v2004-20231222-en
General
-
Target
c0171b6b9b52a7a321e72f715e975fd8896835a342bd0e76ef4e4e3c10d3d872
-
Size
679KB
-
MD5
26af0690bd19cb8cdb1223e1395741d4
-
SHA1
f4fe4879b6d9c5a943aa52f5d1ee532a652b45fb
-
SHA256
c0171b6b9b52a7a321e72f715e975fd8896835a342bd0e76ef4e4e3c10d3d872
-
SHA512
d75f75940b87c4d09f1e4d5c950b50f3fd374a9801a17c7de67a491de7e221266bbf0f6fdefde3c501a28a486f90a3633d1b813180a96cd2cac3d20e27b6b324
-
SSDEEP
12288:CzwD/qNgCE+X4wDw0l3Q9PD4YwO+wdx0G+ygv3qHn+UypQRuR:kwTsxE+Xa0i4Huzneb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0171b6b9b52a7a321e72f715e975fd8896835a342bd0e76ef4e4e3c10d3d872
Files
-
c0171b6b9b52a7a321e72f715e975fd8896835a342bd0e76ef4e4e3c10d3d872.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 677KB - Virtual size: 677KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ