C:\Users\Owner\デスクトップ\Virus\FakeMEMZ\FakeMEMZ 3.0\FakeMEMZ\obj\Release\FakeMEMZ.pdb
Static task
static1
Behavioral task
behavioral1
Sample
FakeMEMZ.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
FakeMEMZ.exe
Resource
win10v2004-20240221-en
General
-
Target
FakeMEMZ.exe
-
Size
111KB
-
MD5
6762a6295679211db31c2cf0405459bc
-
SHA1
32aeab687c6e02550c1acfee97cc65c9ca83f356
-
SHA256
7205a460f67526488fecfb881337d69f84729293ca8b81a13e178199af34da67
-
SHA512
34c34f1144e9140aeb0a26dc47a2b6b6a63030d784ba39e42594cc2d7d4ede0576d77a752b9c04e9f032639cd77f867d2471e40fd11ae9c5994b5a4706df3dcb
-
SSDEEP
3072:IG0yjGhZZgRjruNW/LPqsAoyjeq4/b2XHcFaq40S:Ayj8gR/uc/DF5aq4f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource FakeMEMZ.exe
Files
-
FakeMEMZ.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ