xSIf.pdb
Static task
static1
Behavioral task
behavioral1
Sample
7ee3f1c432f6ecbf80ad09d85f85d01536c918eedd0f622d76fdad7fad03dea7.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
7ee3f1c432f6ecbf80ad09d85f85d01536c918eedd0f622d76fdad7fad03dea7.exe
Resource
win10v2004-20240226-en
General
-
Target
7ee3f1c432f6ecbf80ad09d85f85d01536c918eedd0f622d76fdad7fad03dea7
-
Size
653KB
-
MD5
d415126c382168ba7e756e71188bc8ec
-
SHA1
08f768310cd9b6d4202355fe3f6b2fb42da42bb9
-
SHA256
7ee3f1c432f6ecbf80ad09d85f85d01536c918eedd0f622d76fdad7fad03dea7
-
SHA512
566cf4be1392b709eb60fa68c13c683727eed40cfbea203db4f160e35cacab4f5e46ad86af9ef3fb05924b29fd9a714447b481cd004521dbd2195507a9d8144f
-
SSDEEP
12288:8sJTENl3UUPPg0RFposx48YrkRuLc14h5HWYd8HF2SsIolJP8rStIA6Dc:FxENlkUHgcpnwARF14h18Hobjh8rStPF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7ee3f1c432f6ecbf80ad09d85f85d01536c918eedd0f622d76fdad7fad03dea7
Files
-
7ee3f1c432f6ecbf80ad09d85f85d01536c918eedd0f622d76fdad7fad03dea7.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 650KB - Virtual size: 650KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ