C:\Users\Belim\Desktop\Bloatynosy.LOCAL\Bloatynosy\obj\Debug\Bloatynosy.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Bloatynosy.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Bloatynosy.exe
Resource
win10v2004-20240226-en
General
-
Target
Bloatynosy.exe
-
Size
201KB
-
MD5
4023d60568fdf840ee0a1b16956be19d
-
SHA1
6243fa6a372db0f87f6689999bf31ed6d1f77193
-
SHA256
045d6319e6122ac4486f03ea76ed2a4212e8121f9d2cb5104ab1a8cb9c683d90
-
SHA512
796e32d8f602256a59b4fc87207fe2a04bc96890aff5351146e1a0ee68398badd58a134030e4d92dbaedfe2854e569beb33f08d35769e6b3a5bf3550a4584fc2
-
SSDEEP
6144:7G9ge57l8lMjlUM38egR7OUMA3DlMABlqSmh1ffMpbWE9DQavbev:7G9ge57l8luQQav4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Bloatynosy.exe
Files
-
Bloatynosy.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 189KB - Virtual size: 189KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ