fPZCHvd.pdb
Static task
static1
Behavioral task
behavioral1
Sample
929e32de615a07a4d2635f30c071b1c4b7843a64caedc2f381122d8df25ee473.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
929e32de615a07a4d2635f30c071b1c4b7843a64caedc2f381122d8df25ee473.exe
Resource
win10v2004-20231215-en
General
-
Target
929e32de615a07a4d2635f30c071b1c4b7843a64caedc2f381122d8df25ee473.exe
-
Size
682KB
-
MD5
59fcffaf858a44e45df79af6d8da3731
-
SHA1
2efa4f9b5d0bded1992cbf0892fd42829deea3ef
-
SHA256
929e32de615a07a4d2635f30c071b1c4b7843a64caedc2f381122d8df25ee473
-
SHA512
8cd882bf37daa52864f420cb6c524a596ba3f018c861eac76206793a4325300ac29bbda234a97e4e44084d5298810c0c687f2926182181c620b3d54d13d4b5e9
-
SSDEEP
12288:l6EzqHKMbNozEDBH0Eqk88aFlJ65jniQwtdUCKyh4e3ueRNRBCkspl3SF:lRz87b42HjnepeYbMbi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 929e32de615a07a4d2635f30c071b1c4b7843a64caedc2f381122d8df25ee473.exe
Files
-
929e32de615a07a4d2635f30c071b1c4b7843a64caedc2f381122d8df25ee473.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 671KB - Virtual size: 670KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ