CSaxJ.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0400408c13768054f4591a348dd4bbe8f12b90a0be3593e1f59056f72fdc0b80.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0400408c13768054f4591a348dd4bbe8f12b90a0be3593e1f59056f72fdc0b80.exe
Resource
win10v2004-20231215-en
General
-
Target
0400408c13768054f4591a348dd4bbe8f12b90a0be3593e1f59056f72fdc0b80
-
Size
722KB
-
MD5
ac584386b71f0b2664667d6a2c32dd0b
-
SHA1
5c08fb207344e2db514ba6dc3490e81fc04227d5
-
SHA256
0400408c13768054f4591a348dd4bbe8f12b90a0be3593e1f59056f72fdc0b80
-
SHA512
14c3c3bc3750d05028611dd26ef7d354d68f2d8db55202f3996fc01a287ce30ce1b5fd792005fd02ec280fa1abdc3372e21e1ff3d70f57f3f50c80b79bf7fe0d
-
SSDEEP
12288:B/eQ5vziqogcG1yt7bmpnAWPcUE+R2zy7L3q1QbCdiaRle27wfRtnnlqtHB:hriqo/G4+nAWPdE+RAyfqEqe27wfrnl4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0400408c13768054f4591a348dd4bbe8f12b90a0be3593e1f59056f72fdc0b80
Files
-
0400408c13768054f4591a348dd4bbe8f12b90a0be3593e1f59056f72fdc0b80.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 670KB - Virtual size: 670KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ