C:\Users\Worm\source\repos\Worm_Locker\Worm_Locker\obj\Debug\Worm_Locker.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a06d197b6058d8cb29545e1c8bcfcc93062d6fe3f74d572ef09854f18c91d6a8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
a06d197b6058d8cb29545e1c8bcfcc93062d6fe3f74d572ef09854f18c91d6a8.exe
Resource
win10v2004-20231215-en
General
-
Target
a06d197b6058d8cb29545e1c8bcfcc93062d6fe3f74d572ef09854f18c91d6a8.exe
-
Size
139KB
-
MD5
2bf8d41a0f984216b71424efa9d9a975
-
SHA1
ec982af3fc9c65a705f6a125cc6caca777e2c387
-
SHA256
a06d197b6058d8cb29545e1c8bcfcc93062d6fe3f74d572ef09854f18c91d6a8
-
SHA512
231fb8da3cec2ee0c4d607efedbe4faf0081a2400001f940c84f22f03626ee20ed46475b061b4581f14e1791bbf30fa7612a56d59cfdc0865f98edfce2b20304
-
SSDEEP
3072:evD2EdwZfQDXl6zkaahajx/HTwCewWyPoApxqIZZYJnD1SY:evD2ExaSyHzewWdASVS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a06d197b6058d8cb29545e1c8bcfcc93062d6fe3f74d572ef09854f18c91d6a8.exe
Files
-
a06d197b6058d8cb29545e1c8bcfcc93062d6fe3f74d572ef09854f18c91d6a8.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 133KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ