E:\VisualStudio\source\SGS - Cloud\SMARTRF\LINK+\obj\x64\Debug\SMART RF.pdb
Static task
static1
Behavioral task
behavioral1
Sample
902f7f795e3afcb6a4a67954363ef7dc8ce5c91130dddc1a7d85a03c3c7ea193.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
902f7f795e3afcb6a4a67954363ef7dc8ce5c91130dddc1a7d85a03c3c7ea193.exe
Resource
win10v2004-20240226-en
General
-
Target
902f7f795e3afcb6a4a67954363ef7dc8ce5c91130dddc1a7d85a03c3c7ea193
-
Size
1.8MB
-
MD5
a7b04b06e0d11f5bd4be491863a463fa
-
SHA1
109fa059cbbb0583870657ba0ee3e00587fffd16
-
SHA256
902f7f795e3afcb6a4a67954363ef7dc8ce5c91130dddc1a7d85a03c3c7ea193
-
SHA512
76b709ae27041a236da3160aa551c366dabe0b38ba933d0a8d2bbe9ff4ce136de50699d12c7ecb0c0e6b96ddba88640cc3c31f9e8879e6876eb15a610b0775a4
-
SSDEEP
12288:A5RBtcF5QtWgp13TVlMWRQdoIIHh1Iz2C4F8yBaqaUPOalJliMwH4Q92OWaK0Wuy:AI2XRQdoIa8yBPaU2OliB9fWaF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 902f7f795e3afcb6a4a67954363ef7dc8ce5c91130dddc1a7d85a03c3c7ea193
Files
-
902f7f795e3afcb6a4a67954363ef7dc8ce5c91130dddc1a7d85a03c3c7ea193.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ