ZszD.pdb
Static task
static1
Behavioral task
behavioral1
Sample
81af3372de9de0b722517247542598548c0c6745448d247f3a99da73e4d635c7.exe
Resource
win7-20240221-en
General
-
Target
81af3372de9de0b722517247542598548c0c6745448d247f3a99da73e4d635c7.exe
-
Size
747KB
-
MD5
bfbea0df30227e63176f8d5172587198
-
SHA1
d0622d072c4d29d38fd2176e4544ca0ee2859446
-
SHA256
81af3372de9de0b722517247542598548c0c6745448d247f3a99da73e4d635c7
-
SHA512
abc24c0fadaf5d19d4f6ab4be1cf531666ef7452a273d39ab9b4f70c6497b4a8ccf89fe73569b50bdc1868cd349ecf3bd4804ab6c5902ff3be3e4c4cb8fc2029
-
SSDEEP
12288:QBtgYN/jZEPy141ldYZcqgv1WLAC+37GGrGu4ogAopFzrPDrJ:BS/jZE7YFgvU7+37GjogHDP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81af3372de9de0b722517247542598548c0c6745448d247f3a99da73e4d635c7.exe
Files
-
81af3372de9de0b722517247542598548c0c6745448d247f3a99da73e4d635c7.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 654KB - Virtual size: 653KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ