C:\Users\11502\Desktop\SharpWeb-main\SharpWeb\obj\Debug\SharpWeb.pdb
Static task
static1
Behavioral task
behavioral1
Sample
54bb4aad5fef1e32777c2165a0ca9a7920d9029b7fbbe3886e06932a8db21675.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
54bb4aad5fef1e32777c2165a0ca9a7920d9029b7fbbe3886e06932a8db21675.exe
Resource
win10v2004-20231215-en
General
-
Target
45fd9224d365376207bc0d6a562cf39e.bin
-
Size
365KB
-
MD5
8d72c04e92ea8a0f39f715a7b6f705ad
-
SHA1
09856502895c0449b7cb54fe6c7eafc22e9ef6e6
-
SHA256
38c8709f78632a8c707bb38becc44b4792106709870a3a422ade41503cd8a07d
-
SHA512
c7a2d76c0067e031e55e867dc18153dd4c518aeecc1e74b775d74c2a32bf3644a7735537ad838266769f830038eacd4c64708f3b46534957933620508d9b57d3
-
SSDEEP
6144:suB3pInI8DbF8ZrvJR2z4e8bUlDnOV1/Tm9fH1Vqe83wczqYJHuROrGYCv0+XVon:sCpInI8HF4c8eDOv8fH/qe8AcBtOqGYt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/54bb4aad5fef1e32777c2165a0ca9a7920d9029b7fbbe3886e06932a8db21675.exe
Files
-
45fd9224d365376207bc0d6a562cf39e.bin.zip
Password: infected
-
54bb4aad5fef1e32777c2165a0ca9a7920d9029b7fbbe3886e06932a8db21675.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 397KB - Virtual size: 396KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ