D:\Repository\WPD\classic\WPD\obj\Release\WPD.pdb
Static task
static1
Behavioral task
behavioral1
Sample
internal.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
internal.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
internal.exe
Resource
win11-20240214-en
General
-
Target
internal.exe
-
Size
517KB
-
MD5
534eb183bdb5d1789191589b42c54ed4
-
SHA1
ec9018b0c65a2ac603f33c99367951fbec3fe309
-
SHA256
800c36850225857241f28b22e7ad91783b58e1622c8bb86245e29f8d5095a27c
-
SHA512
ebec7fd02cc83d184b9908118ee4a43174e34d9f5d9906b4e365c858986ec51b47c9497329561c26bd1c802646741abb7dd21b6c5bcccc3743244815c68a70f7
-
SSDEEP
6144:x1VVgoJF+nF7d8cbecDu5n6X96fz9xiJ4qBRtbvWjoAqDZ0b3JxOoBN6gKTBNOjp:xodpu5n07RtbDZ0b3Jx3DCQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource internal.exe
Files
-
internal.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 444KB - Virtual size: 444KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ