C:\Users\Kenny\AppData\Local\Temp\Done.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ad909fb29790b397f57d0b1255483e57.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ad909fb29790b397f57d0b1255483e57.exe
Resource
win10v2004-20240226-en
General
-
Target
ad909fb29790b397f57d0b1255483e57
-
Size
528KB
-
MD5
ad909fb29790b397f57d0b1255483e57
-
SHA1
54e661feab037dbbf41604c57affc0c8b8fd3722
-
SHA256
81f8a7a48e1c543a1a4ac04a056634861b129cf07a7f63711b535a4e6850095d
-
SHA512
c36053d613e868e62ab3ad25c6ef9b9159807b356ce72036d06833e7e052c69b8f260bbe2290afc54a924d85487e8248c8dd8d4205b01c2d4f41941eafd5f143
-
SSDEEP
12288:JXehr3BbkJbZQ2kTCfNOVFILo1iLUGXfX02iduXzpnVCqJd35j:U3BkJ1ZkW16Kcwnpo0NQqJF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad909fb29790b397f57d0b1255483e57
Files
-
ad909fb29790b397f57d0b1255483e57.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 526KB - Virtual size: 525KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 924B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ