C:\Users\Сергей\Documents\VS Projects\XFilePumper\obj\Release\XFilePumper.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8af7c3f82ad26852a76b872771b62edb87eaf52d3f38332daa06f577a2122850.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8af7c3f82ad26852a76b872771b62edb87eaf52d3f38332daa06f577a2122850.exe
Resource
win10v2004-20231215-en
General
-
Target
8af7c3f82ad26852a76b872771b62edb87eaf52d3f38332daa06f577a2122850.exe
-
Size
202KB
-
MD5
09badb8acf8fe1c8d35791aa2593c118
-
SHA1
9c22f98c4d578b3f593b160362b10beb1a1ca901
-
SHA256
8af7c3f82ad26852a76b872771b62edb87eaf52d3f38332daa06f577a2122850
-
SHA512
9ace0b41912cc8b848fc619157423eb7ff118121202357c0831dbd7513a372e1c71ccb1ff8751ecb55709ed45fcec1c54583924d2555467c99823f2cbeffe955
-
SSDEEP
1536:d4Nn++cDme06rAzdtxF0dhkDgpqPh8Wiim5oQ:d4cmh/0bIgGh+oQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8af7c3f82ad26852a76b872771b62edb87eaf52d3f38332daa06f577a2122850.exe
Files
-
8af7c3f82ad26852a76b872771b62edb87eaf52d3f38332daa06f577a2122850.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 199KB - Virtual size: 199KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ