C:\_RU\WeAreChmnet\WeAreChmnet\obj\Debug\WeAreChmnet.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ae321bd238ba902ce1c50c87fe4558879df40953425bf6c57e021a7fdfa3f8b0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ae321bd238ba902ce1c50c87fe4558879df40953425bf6c57e021a7fdfa3f8b0.exe
Resource
win10v2004-20231215-en
General
-
Target
ae321bd238ba902ce1c50c87fe4558879df40953425bf6c57e021a7fdfa3f8b0
-
Size
35KB
-
MD5
21e12fcb84d39706dc36d44b6e801e71
-
SHA1
4905d8dccf16216bc72aa2575dda6b2f8c53f871
-
SHA256
ae321bd238ba902ce1c50c87fe4558879df40953425bf6c57e021a7fdfa3f8b0
-
SHA512
13a8a78c152673d64ed9a5a7d7a07bf8a0e0ad83d982d27b37418024a5253e2f071516ca53cd61b659a2add59c13ded4dd77a6565fd615a6adbe5f0319f7e797
-
SSDEEP
768:EgLs+fKhR9BoDbnPcDUctnaTTPH5SBC5ib8OpQ97zVYuSF:E+DgDln4TPZ4C50i9s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae321bd238ba902ce1c50c87fe4558879df40953425bf6c57e021a7fdfa3f8b0
Files
-
ae321bd238ba902ce1c50c87fe4558879df40953425bf6c57e021a7fdfa3f8b0.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ