C:\dev\flowtimer-master\FlowTimer\obj\Release\FlowTimer.pdb
Static task
static1
General
-
Target
FlowTimer.exe
-
Size
1.9MB
-
MD5
53cc3837348792a07dcf4cddd6bb6a9a
-
SHA1
25dd85e95444ac6ee7d1c0fae59c6e2bbb434732
-
SHA256
2ae34f8a30930c87d174431ce3bf2a8d09a1db7d649e73a7d5a2b7c328276187
-
SHA512
004f5c38e1b64077d78d5fdf83e10a822314a0f289429f042056b73c66a903ba2a05e0f45941ed88d7e417341b400ad2bebd2eaef07c57524c3fea269991b27c
-
SSDEEP
49152:SwdQBzjtstVZaYuWNCRLa/r/fHc/d/xHq/z/Xwoc+k/sRMMQ8iG:jJ0YBJi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource FlowTimer.exe
Files
-
FlowTimer.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ