gyhy.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Document.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Document.exe
Resource
win10v2004-20240226-en
General
-
Target
Document.exe
-
Size
767KB
-
MD5
ee6d816804e33af3612b95b8e93a4d28
-
SHA1
1622d94e2853404aa2e042a1b5451a4caf7777c2
-
SHA256
d82d38f0e16b8bc4210a0d34561a6d2331c46061542012f6c1105ea17bc92f5b
-
SHA512
7350fc73d120f6ab26d39396698533be7ab3f204bd72b33c30de7f148b769d4b36848fc4c1f8aa9e33ccffd4ca305648cca2f57baf39dbb52c608d5e40a79396
-
SSDEEP
12288:h9JSsjWqrUDVEMeFv8As0I98hUdHV4qaPRi/qHmJzFnK4u7mUGQcApon6XD4:vJSsj4CLFEArRUhVRapcqGJzFnKTyHlG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Document.exe
Files
-
Document.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 765KB - Virtual size: 764KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ