CyWnlc0.pdb
Static task
static1
Behavioral task
behavioral1
Sample
740e3dd23ebbc1ba1ecd5c728d598b1a40e7683d67d96e72e6102a4bd1a04e91.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
740e3dd23ebbc1ba1ecd5c728d598b1a40e7683d67d96e72e6102a4bd1a04e91.exe
Resource
win10v2004-20231222-en
General
-
Target
740e3dd23ebbc1ba1ecd5c728d598b1a40e7683d67d96e72e6102a4bd1a04e91
-
Size
598KB
-
MD5
ff1311f93f8239ad871aa5277d396703
-
SHA1
25a1283b145440b5b6a3b982dae29c646b3dad95
-
SHA256
740e3dd23ebbc1ba1ecd5c728d598b1a40e7683d67d96e72e6102a4bd1a04e91
-
SHA512
ebb815bb0aba49c524ce906d33e29dc17795619b10c378a6715e48ac6c06a3933c49ac107c6ad79cad1e58b5681cbb67179d6c11e379f5d5bac269fa87f4ec33
-
SSDEEP
12288:weW/T7I3AA/98qzGTfQLFRPzci/9iMH+hc7VGmR7WQIA:Hi7up8rcLvPPoMHdxvF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 740e3dd23ebbc1ba1ecd5c728d598b1a40e7683d67d96e72e6102a4bd1a04e91
Files
-
740e3dd23ebbc1ba1ecd5c728d598b1a40e7683d67d96e72e6102a4bd1a04e91.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 596KB - Virtual size: 595KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ