C:\fawevugu67 bexoraviteg\jalok50_geregegovijow\mumeral.pdb
Static task
static1
Behavioral task
behavioral1
Sample
31c0b76b7535eaf0f527ac03347f3eb5e38af03669b29c91bd44432b4f9f4ba4.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
31c0b76b7535eaf0f527ac03347f3eb5e38af03669b29c91bd44432b4f9f4ba4.exe
Resource
win10v2004-20240226-en
General
-
Target
31c0b76b7535eaf0f527ac03347f3eb5e38af03669b29c91bd44432b4f9f4ba4
-
Size
260KB
-
MD5
bc5bbb2fc4706cb47056507f6e2f7d49
-
SHA1
5cc70f99b3ab0a7244887ea1192a9550116e5d0d
-
SHA256
31c0b76b7535eaf0f527ac03347f3eb5e38af03669b29c91bd44432b4f9f4ba4
-
SHA512
933453f4d9c9897f39ee9b57afa250ed58a43f02c02d20f52433a176cabffa621f2f624c99cb4f9875147708a3be21f9d8530c0799411981d19d011d93abe20a
-
SSDEEP
1536:BwpMNDbaCB6KdZbeTLF18cjJTRmCrMWZ/lwPT:B0IXPBdbcLn8clInr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31c0b76b7535eaf0f527ac03347f3eb5e38af03669b29c91bd44432b4f9f4ba4
Files
-
31c0b76b7535eaf0f527ac03347f3eb5e38af03669b29c91bd44432b4f9f4ba4.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 39.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ