sfxcab.pdb
Static task
static1
Behavioral task
behavioral1
Sample
adac1e3ee33539259c0247c2ecd2b69e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
adac1e3ee33539259c0247c2ecd2b69e.exe
Resource
win10v2004-20240226-en
General
-
Target
adac1e3ee33539259c0247c2ecd2b69e
-
Size
4KB
-
MD5
adac1e3ee33539259c0247c2ecd2b69e
-
SHA1
7596175ab684f76c3266b17be4a987762768212f
-
SHA256
33ea253da16d4bc1a0a5598a994d20ce600bcfb10c3e255b79d5c9baf79a1a75
-
SHA512
ef7b124aa9dc8d4859560fad22c1d32d0911bbce48bc983339174835d6635c4c631c92893447beb791c2137c0f55a5d6f61418f11d2168f3a12dd12f551b976a
-
SSDEEP
48:ad0pIyISSa/WrnpuvlOoEjtZUW0yWjvAuBRezlnTmZAsVxfAc5VXau+1si7:ay10rnpuKUFedTmZAsRH0s+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adac1e3ee33539259c0247c2ecd2b69e
Files
-
adac1e3ee33539259c0247c2ecd2b69e.exe windows:5 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB Paths
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ