C:\Documents and Settings\Sasha\Local Settings\Temp\zfn1q4lq.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b5ca77711219ec8393c9e4f5f601fadd.exe
Resource
win7-20240221-en
General
-
Target
b5ca77711219ec8393c9e4f5f601fadd
-
Size
716KB
-
MD5
b5ca77711219ec8393c9e4f5f601fadd
-
SHA1
fb7fa73ab174a78f0d0ace643fe8fde4699e67b6
-
SHA256
c7a7903d635db81592cc2d3ab0ae126a86679c3742c0fa3d90ca6ae3f2dc9828
-
SHA512
a4658a7f5dbcbd287ffbfd74a10af43ee8de9ad3018e86a1be558af2ed82d03b22ea9a4f9d013fe0bf1db8beefcd7cb0e8047cf2f1216162be8cd196c12cd511
-
SSDEEP
12288:tYGZQsNUMc7r+Keg9xmGGcMomKd8pVpztY16zCoJdZIsLjXjgv:tMdG+PM+d8Zzcc1JvIsjjgv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5ca77711219ec8393c9e4f5f601fadd
Files
-
b5ca77711219ec8393c9e4f5f601fadd.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 700KB - Virtual size: 696KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 4KB - Virtual size: 117B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ