tests_for_preparation_for_technical_school.pdb
Static task
static1
Behavioral task
behavioral1
Sample
fd772b8be4f37e29ebd0aa100406912bff28b54f21aaa4ba6c844fd635281458.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fd772b8be4f37e29ebd0aa100406912bff28b54f21aaa4ba6c844fd635281458.exe
Resource
win10-20231220-en
General
-
Target
fd772b8be4f37e29ebd0aa100406912bff28b54f21aaa4ba6c844fd635281458
-
Size
2.9MB
-
MD5
e555471283e63ab1bac54281b9b36afc
-
SHA1
16681f0b7bc43ec21ad16f50b038bd7641d2951b
-
SHA256
fd772b8be4f37e29ebd0aa100406912bff28b54f21aaa4ba6c844fd635281458
-
SHA512
ccc4f0d4ba0987d3c20958040e7fde99753e9d5d59961fdac1a9548ab3970d7b64ebb2f071b8fb007dcbc7a086db3bfcccd63a71017a03d4b8888bb7fe336b5a
-
SSDEEP
49152:6x4UY38MwHPmp3TU/iiPc7gy8JKZHRT7Wh9Szf7ul:6qUPvmpY/7c57WhUjul
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd772b8be4f37e29ebd0aa100406912bff28b54f21aaa4ba6c844fd635281458
Files
-
fd772b8be4f37e29ebd0aa100406912bff28b54f21aaa4ba6c844fd635281458.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 346KB - Virtual size: 346KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ