E:\Projects1\ProjectCleaner\obj\Release\v3sSIlf5.pdb
Static task
static1
Behavioral task
behavioral1
Sample
v3sSIlf5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
v3sSIlf5.exe
Resource
win10v2004-20231222-en
General
-
Target
v3sSIlf5.exe
-
Size
22KB
-
MD5
3ebf71bd4a8d498de63926ce60096dc6
-
SHA1
c75b485900b40754d58dca94aed49fea1883a025
-
SHA256
572a1ba72e0dc84c624bb7ad325113b5806d2c92a02d8a49da3af03f2eefd422
-
SHA512
f5ea19f5e0dafbbd11d54211c562162de153073dbce3cd01e58c1f50e48d732f84b0a5dfd8059d2d0243f3f7bc9b5f7a0db87b2344b10088560ff3b82a9768b8
-
SSDEEP
384:+03PZpnZHtOp6Yf13wJlQWogmdO6Xvo3cLM:VPXm6Y5Z4cw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource v3sSIlf5.exe
Files
-
v3sSIlf5.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ