C:/Users/cat/cat/cat/cat.pdb
Static task
static1
General
-
Target
windowsdefenderfriendly.exe
-
Size
11KB
-
MD5
eb4786a304bec9cefa2d711daec2613c
-
SHA1
c8d885ac863351e82e37fcbba698c87ba6d5a813
-
SHA256
016e993d6b8f6e5834d7cd16ef140986b4003d4ae6d91bf38a01011b79c1f52f
-
SHA512
8367224a440b8ca1f505a4e498e2b651341ed45a5ad3d0ea0baf7a794eb7408a0c0a621e411976d65f2a97330b232df80c0dcb052ce0c6c6f92d68ff5c597a0e
-
SSDEEP
192:5b8Jsrec9Dmn7tjTS7HQANjZz5cN0XAvzT0DGz8M2OJ5MYFbu0rYN:5bV6rJT8Qat6NvvzAXM2Kbs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource windowsdefenderfriendly.exe
Files
-
windowsdefenderfriendly.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ