vSyK.pdb
Static task
static1
Behavioral task
behavioral1
Sample
583e31ebcbc67add8f25e46bd487b11b157f84f4e0b2639147a06a39612650ce.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
583e31ebcbc67add8f25e46bd487b11b157f84f4e0b2639147a06a39612650ce.exe
Resource
win10v2004-20231215-en
General
-
Target
583e31ebcbc67add8f25e46bd487b11b157f84f4e0b2639147a06a39612650ce
-
Size
718KB
-
MD5
f4dde667bee347d468c56b0cd0bb3436
-
SHA1
7c3a7f92da06cb48965897c552e5ec7ede1bc368
-
SHA256
583e31ebcbc67add8f25e46bd487b11b157f84f4e0b2639147a06a39612650ce
-
SHA512
e244e2432d9f1e1fb55605160f4c64bed1e42d3220bb18d52864e0513a6da6f5dcc0b844b06bf37b41b2b20e7783d4de2f49899cb2656db1ea8baa561d01c162
-
SSDEEP
12288:DITSmPwRYnOELz89b/0txwj0jbJXMwcn0HzKMz4i+WXT5TG90hzXT/W4vfJp/Omg:+SmP0Y74j0txwjERSnY4i+ATI0hXTZv9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 583e31ebcbc67add8f25e46bd487b11b157f84f4e0b2639147a06a39612650ce
Files
-
583e31ebcbc67add8f25e46bd487b11b157f84f4e0b2639147a06a39612650ce.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 700KB - Virtual size: 699KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ