C:\Users\Administrator\Documents\Visual Studio 2008\Projects\TeamspeakGadget\TeamspeakGadgetTest\obj\Release\TeamspeakGadgetTest.pdb
Static task
static1
Behavioral task
behavioral1
Sample
fdff56df249c4bc04a239f4f7272f2c77e6da10401c91b4944c7fe8fd5376125.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fdff56df249c4bc04a239f4f7272f2c77e6da10401c91b4944c7fe8fd5376125.exe
Resource
win10v2004-20240226-en
General
-
Target
fdff56df249c4bc04a239f4f7272f2c77e6da10401c91b4944c7fe8fd5376125
-
Size
10KB
-
MD5
f06e69b498d57400af18d83ea89824a1
-
SHA1
309a8e76eb385246879cb10ddb67d3bb0ec87fed
-
SHA256
fdff56df249c4bc04a239f4f7272f2c77e6da10401c91b4944c7fe8fd5376125
-
SHA512
150aba26405b624171f5d5449683706f32bff8c2ee61aeefaffc571681fbcda06e34de28ca9b3a321201b544de530d938bf0185e708a17dbd3657b28b39a8985
-
SSDEEP
192:mG9PZzfhSyToVT+MEQ0UjQIWKcNSKWUX:99PZzplsZ+MEQ0UgKQSKWU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdff56df249c4bc04a239f4f7272f2c77e6da10401c91b4944c7fe8fd5376125
Files
-
fdff56df249c4bc04a239f4f7272f2c77e6da10401c91b4944c7fe8fd5376125.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ