C:\Users\mnoureldin\source\repos\nopowershell_DIB\nopowershell_DIB\obj\x64\Release\nopowershell_DIB.pdb
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win64.DropperX-gen.22875.19599.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win64.DropperX-gen.22875.19599.exe
Resource
win10v2004-20240221-en
General
-
Target
SecuriteInfo.com.Win64.DropperX-gen.22875.19599.exe
-
Size
4KB
-
MD5
70231e06de21168015186a8e0e7918cc
-
SHA1
3280e129189be2afb2808da48aae5b26d458ee2a
-
SHA256
210f6a07cd5310322b1c42dae2d1fe159150b943adc72c5d654957316ec880f7
-
SHA512
f6839a674db23f4f065e5c0c2d595306276a38d7d4d17a8171779afb170e3db04e69b220ca3d70f44d4492d6c4e9ba5c55e3aa89c66e20ace608dc7b3fcee078
-
SSDEEP
48:6Va7Ix/PCv0mF2HoHPO9q6NM64iTDWjroVbbgZipotS+Xl5YS/XfKFSpfbNtm:GxcQHKG9F4iTaXoVbM1vhzNt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Win64.DropperX-gen.22875.19599.exe
Files
-
SecuriteInfo.com.Win64.DropperX-gen.22875.19599.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ