C:\a\SAs1a33\obj\Release\Xq3x5.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b6343004424b2c986dc7450642afc28c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b6343004424b2c986dc7450642afc28c.exe
Resource
win10v2004-20240226-en
General
-
Target
b6343004424b2c986dc7450642afc28c
-
Size
51KB
-
MD5
b6343004424b2c986dc7450642afc28c
-
SHA1
b2bf7f019b280a455ff53032a7cbb8101d56dd23
-
SHA256
e5cf8240eecfdc3f90494d5e758e0671a2557fde9480b289f9a3882df7a47b2e
-
SHA512
77baa4587e0dfa9cb949a89509379eb21c936fd80a3e41c7be07091181a3ca2821b796bbc3af72ae6ec887b2182dc36a2b5608bc256b1920f121dc83c53485e8
-
SSDEEP
1536:/R9B/HeVbc1NrvplbMTbnh4g/w+zXr0MdA39nQF:fB/HNFgn1PXQVQF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6343004424b2c986dc7450642afc28c
Files
-
b6343004424b2c986dc7450642afc28c.exe windows:4 windows
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ