C:\Users\Dontmessup\source\repos\SleepEncrypted\SleepEncrypted\obj\Release\SleepEncrypted.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b5fd4395f6dfdfab36fea2478ea06fa1.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
b5fd4395f6dfdfab36fea2478ea06fa1.exe
Resource
win10v2004-20240226-en
General
-
Target
b5fd4395f6dfdfab36fea2478ea06fa1
-
Size
368KB
-
MD5
b5fd4395f6dfdfab36fea2478ea06fa1
-
SHA1
db57d072615073f61734ab895bf28feae8df0074
-
SHA256
b7572024d20143b321214ca16a2b1a648dbf1340852e20e60d510ae3a2001bc8
-
SHA512
3dc91ee4c8151129e57032955f4914a53c54097ce648446c78c44f392521417dedfbbea7ea2304e014e172b0dab1bb3d2cbc0839bf647bcd953ca5dd3e1c5741
-
SSDEEP
384:94/U3OeCnlNJwz56qIpcRPZwa0s1UDzGq9WQ:94Dhw964l1s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5fd4395f6dfdfab36fea2478ea06fa1
Files
-
b5fd4395f6dfdfab36fea2478ea06fa1.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ