C:\Windows\Containers\Confidential\DotnetGenerator\Stub\Projects\SiNoEstas\obj\Debug\SiNoEstas.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b9ea4a5818248577c99f2209a7b339bdea30f5321adad8563cc8966a39959e4c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
b9ea4a5818248577c99f2209a7b339bdea30f5321adad8563cc8966a39959e4c.exe
Resource
win10v2004-20231215-en
General
-
Target
b9ea4a5818248577c99f2209a7b339bdea30f5321adad8563cc8966a39959e4c.exe
-
Size
38KB
-
MD5
a1e303286c5d8d3897cbb51d851e2a5b
-
SHA1
df1023e56e86125484aa81edc465702fb63bb442
-
SHA256
b9ea4a5818248577c99f2209a7b339bdea30f5321adad8563cc8966a39959e4c
-
SHA512
a31039df3fedaece72672676957b230ef23bdc3f34dfca34b3650f352fa79b83175451efee7a1544095608c1c407627308ef625c74c6e2e6e6ac04427934c033
-
SSDEEP
768:6F+BxMfM6+5jJtRGnMf26UQfodhFz9/0LZlS:6F+UE6IjvRGn037aFmO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9ea4a5818248577c99f2209a7b339bdea30f5321adad8563cc8966a39959e4c.exe
Files
-
b9ea4a5818248577c99f2209a7b339bdea30f5321adad8563cc8966a39959e4c.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ