C:\Documents and Settings\Admin\Мои документы\Visual Studio 2008\Projects\Generator_New_New\Generator\obj\Debug\Generator.pdb
Static task
static1
Behavioral task
behavioral1
Sample
bb6cc29d3d80bdb67d2aa773fab2f766cfbf99d68474bc866ee6026796519cdd.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bb6cc29d3d80bdb67d2aa773fab2f766cfbf99d68474bc866ee6026796519cdd.exe
Resource
win10v2004-20240226-en
General
-
Target
2d5d7f03a0710ac25a3641c302dd13c3.bin
-
Size
395KB
-
MD5
9f426d4a47114e4a9fa5c0e884724c50
-
SHA1
f13d37852b2fccc82b2b5d314e183a51ccc0992f
-
SHA256
ad6ca8823971be249382ec6b4ae1b34d60b33e8ff3e188a07197ad78085618c9
-
SHA512
7213cd07c6c80161af1942820ea032fefefd90c00d533ee2d4244d7a79b57b424ae387476a430106a1b086fed3bf09cf7369b60102eeb1c3da3fcf6a538a3101
-
SSDEEP
6144:8nkU/Y7Qj+5zB9mw73ZmCG872c6NQeGO2veScQygg3BIbrmXTZapJ0PmhB542M37:8vbj+RBh0387oNmwXSQBIGjz72M7/QiP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/bb6cc29d3d80bdb67d2aa773fab2f766cfbf99d68474bc866ee6026796519cdd.exe
Files
-
2d5d7f03a0710ac25a3641c302dd13c3.bin.zip
Password: infected
-
bb6cc29d3d80bdb67d2aa773fab2f766cfbf99d68474bc866ee6026796519cdd.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 831KB - Virtual size: 830KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 190B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 195KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ