twLNDYv.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ba9c0fc610a435fc11f48caf932a52f15e418d45e9ec21c83e08e624b28a8b90.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ba9c0fc610a435fc11f48caf932a52f15e418d45e9ec21c83e08e624b28a8b90.exe
Resource
win10v2004-20231215-en
General
-
Target
ba9c0fc610a435fc11f48caf932a52f15e418d45e9ec21c83e08e624b28a8b90.exe
-
Size
732KB
-
MD5
f03d0db80476652ed382c76708ef9eee
-
SHA1
9af52befe94c41e3ffc0e2abca5f3df51ffbeb5d
-
SHA256
ba9c0fc610a435fc11f48caf932a52f15e418d45e9ec21c83e08e624b28a8b90
-
SHA512
fd179e6b9228bcf01143148a05f9c61083d068f6f1e5c0de29eb3360cfc1d1b0964e237b09f454e63c2e08c6ec6ca6bad8a3682a079ce242ec96c49dd090a17a
-
SSDEEP
12288:j33ZyPIDwOw8ftv9+ZDO6DeMTLIHmz+WQ5VRQmOXgiVtp3g5Hdv2kiQPmoIbWYV:j33Z8MBiK6PIGCLVemOgQaHd2khPfIHV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba9c0fc610a435fc11f48caf932a52f15e418d45e9ec21c83e08e624b28a8b90.exe
Files
-
ba9c0fc610a435fc11f48caf932a52f15e418d45e9ec21c83e08e624b28a8b90.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 679KB - Virtual size: 678KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ