C:\Users\User\Desktop\Tool\Tool\Tool\obj\x64\Release\Tool.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Wind_Exploit_Tool.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Wind_Exploit_Tool.exe
Resource
win10v2004-20231215-en
General
-
Target
Wind_Exploit_Tool.exe
-
Size
1.1MB
-
MD5
79605621fc490bb222a2aead874a3b19
-
SHA1
351da53ebd13e262121e8f4c35091391010eb9c5
-
SHA256
c2eb17e78d893ddf9eb2ad9b4c43cf369ccc25727421063a4b9f62362a62a891
-
SHA512
f478ddb6b5965cc688ae40fd3eb762df9bc3b2b0fe9569f4d0c723fef5ee62d95e0fa73654f0edef2182be3459a14cc6a9e12dd6d4983d1dc03482fdd22d8eba
-
SSDEEP
12288:tYe333MvvvsnnnoP0zUP8jUeCaA3KzJxobpg/TYqPPNROiAgI9XF02by333Mvvv/:tbC3Qx0p1qXOPg8XF02
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Wind_Exploit_Tool.exe
Files
-
Wind_Exploit_Tool.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 745KB - Virtual size: 744KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ