jTPL.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c6aa4df5c1a41c924836d332bdb2cc68a5c4c611dbeae29629ed86f7ccb4b10e.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
c6aa4df5c1a41c924836d332bdb2cc68a5c4c611dbeae29629ed86f7ccb4b10e.exe
Resource
win10v2004-20240226-en
General
-
Target
c6aa4df5c1a41c924836d332bdb2cc68a5c4c611dbeae29629ed86f7ccb4b10e
-
Size
751KB
-
MD5
21359335fbd65ef5d2351fa45230c2f0
-
SHA1
08b813bf5615ab5e6a41fac323349e9ca3fe6a2f
-
SHA256
c6aa4df5c1a41c924836d332bdb2cc68a5c4c611dbeae29629ed86f7ccb4b10e
-
SHA512
f2a8944b2cf7b60f27cda4e0f16741f98b06404a713cdae9e2ba19c3345acf989580d7911965286f33e8670ad26fcfae34b9950c1dbaa45f21fc52f7c0f49c57
-
SSDEEP
12288:qm1emEgzgjjN2iN+X6AdtGNc17QK4qjRyJSn8k/SduA1hvR/ejceM:qm0+gjjN12YI73zj8JSn56duA1J0jc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c6aa4df5c1a41c924836d332bdb2cc68a5c4c611dbeae29629ed86f7ccb4b10e
Files
-
c6aa4df5c1a41c924836d332bdb2cc68a5c4c611dbeae29629ed86f7ccb4b10e.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 749KB - Virtual size: 748KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ