TfHIIQy.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2165a0d28ca7da9dcccd1890b7fae09037b23090c16d7e6877de89667e7aa27b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2165a0d28ca7da9dcccd1890b7fae09037b23090c16d7e6877de89667e7aa27b.exe
Resource
win10v2004-20231215-en
General
-
Target
2165a0d28ca7da9dcccd1890b7fae09037b23090c16d7e6877de89667e7aa27b.exe
-
Size
698KB
-
MD5
c4739b56271d3d99ff7449053f997e76
-
SHA1
578cb65ac1f0660c06a61b2be36f3f60d5b0ae98
-
SHA256
2165a0d28ca7da9dcccd1890b7fae09037b23090c16d7e6877de89667e7aa27b
-
SHA512
7e6a0934b695b66df33a21aff9d58768336ea3a6300ba55bb1b6424ea0912a3aeb1e20b3f03fb989eadee3dfd6ebcb9df85f6b69dd0c3db518c23e82a380caec
-
SSDEEP
12288:oaEzqHKMbNqM8hu6Vw6xPgxb453SHmYrn1HnfFokjg1YG4s/QdMqZlWZYsYb9JVz:oxz87bfB/DtxGYhfFo+G4suJDWZYsyVt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2165a0d28ca7da9dcccd1890b7fae09037b23090c16d7e6877de89667e7aa27b.exe
Files
-
2165a0d28ca7da9dcccd1890b7fae09037b23090c16d7e6877de89667e7aa27b.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 687KB - Virtual size: 687KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ