anJVPfk.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2f2ac3a61d78a5a9a514fec1182bb4cbb11e87d882601c6b4c20a150dd87a7b0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2f2ac3a61d78a5a9a514fec1182bb4cbb11e87d882601c6b4c20a150dd87a7b0.exe
Resource
win10v2004-20231215-en
General
-
Target
2f2ac3a61d78a5a9a514fec1182bb4cbb11e87d882601c6b4c20a150dd87a7b0
-
Size
697KB
-
MD5
e7fd543170e6b49b2b42cddcb06cb69f
-
SHA1
6406502a5b63295aba0850d82124c85d7baa5dac
-
SHA256
2f2ac3a61d78a5a9a514fec1182bb4cbb11e87d882601c6b4c20a150dd87a7b0
-
SHA512
647077f1e0eb16d0e7ab9533cfb0926efc68e66bc400c8b90deb75e685bd7509f0d1de8573f93709272272a2093dbe95eaf74c31677b105b4d30cb5c9eb1a502
-
SSDEEP
12288:ZgEzqHKMbNL1n1CiyU5n3L8hvkfye/4dpgBdlEzXFi2z:ZDz87b51n/H5nBKe/4r4lyFic
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f2ac3a61d78a5a9a514fec1182bb4cbb11e87d882601c6b4c20a150dd87a7b0
Files
-
2f2ac3a61d78a5a9a514fec1182bb4cbb11e87d882601c6b4c20a150dd87a7b0.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 671KB - Virtual size: 671KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ