OpKpG.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5841635d204dd770ac5c57782e65684775c95dcedf4f7dbc44f8ae60f91549d9.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5841635d204dd770ac5c57782e65684775c95dcedf4f7dbc44f8ae60f91549d9.exe
Resource
win10v2004-20231215-en
General
-
Target
5841635d204dd770ac5c57782e65684775c95dcedf4f7dbc44f8ae60f91549d9
-
Size
695KB
-
MD5
2f400c2cdac1c848b5bd56e10b25bdaa
-
SHA1
d455ec4244e753e84f016da3683cd42f7e9318d1
-
SHA256
5841635d204dd770ac5c57782e65684775c95dcedf4f7dbc44f8ae60f91549d9
-
SHA512
aec1bbc064f3197dec6b85ced6fcc1b27335f1bc9dc1a7cc9e53f8e57d506357564f9c9ad1b816b8c8bb057d4030e09d202143335832246c412b23aa694dbef1
-
SSDEEP
12288:1eQ5vziIIwqkBV16QjE7AUrt9L8+4Jyzx4a84Vx1KK3M/BMN48nwMtzHhm4Biur:1rihQ6QqAqt9A2xP84VGYN7nZ5Hhm4j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5841635d204dd770ac5c57782e65684775c95dcedf4f7dbc44f8ae60f91549d9
Files
-
5841635d204dd770ac5c57782e65684775c95dcedf4f7dbc44f8ae60f91549d9.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 666KB - Virtual size: 665KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ