C:\Users\Administrator\Desktop\Client\Temp\oUoNcFSTBQ\src\obj\Debug\NotifyEventCallba.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a365ed966a7852458e597021a10e5348.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a365ed966a7852458e597021a10e5348.exe
Resource
win10v2004-20240221-en
General
-
Target
a365ed966a7852458e597021a10e5348
-
Size
859KB
-
MD5
a365ed966a7852458e597021a10e5348
-
SHA1
4f5faaab17be2d06c55ab82de1c08bd2823460c5
-
SHA256
366671ce28feae3d506440a494ed7b63716518eb9b3b08e52d3e1d06c3d73b04
-
SHA512
a78980ae20c880c712371ef8d88a4ef20e95161c8d2c3c245afd850ca0d3be102d4b8d7bea5590a2e49f9a6f621246d0e93ad43df1037e706eac00c4f8fe257c
-
SSDEEP
12288:m0cPQx+R+52NYn6023EXuSFJ1w86sD0pXq1zdytSXZj0zH37hn:mJPQsR+fn+xy+np6Cs4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a365ed966a7852458e597021a10e5348
Files
-
a365ed966a7852458e597021a10e5348.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 857KB - Virtual size: 856KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ