C:\Users\Gilad\Programming projects\C# projects\MCmodTrojanFake\MCmodTrojanFake\obj\x86\Release\MCmodTrojanFake.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c8b3c729a6c6628b09c351a4edee317d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c8b3c729a6c6628b09c351a4edee317d.exe
Resource
win10v2004-20240226-en
General
-
Target
c8b3c729a6c6628b09c351a4edee317d
-
Size
486KB
-
MD5
c8b3c729a6c6628b09c351a4edee317d
-
SHA1
66653217c0bb465fddc0a654e692b9a118bf4f4b
-
SHA256
01b537354cdb0891d17fcd696e88d1a605ec7f946eff9b7c553f187b91da5b7e
-
SHA512
c35ce790d0d9897ef6c67f8cdc9ab1a46a11ed534617996f0011fe75108b31ac6f9beafaa0cb7f450b2a9c6efe4b9c3cffd6a58d2351b0b9e8afb651f78ed33e
-
SSDEEP
12288:3H6H9M8YldKsAzzqN8NR0L+EMFGQSIaxYpfpSSgf8WVw8Q:KH9MHlH0zqoOL+EMFJSfYxBG8uw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8b3c729a6c6628b09c351a4edee317d
Files
-
c8b3c729a6c6628b09c351a4edee317d.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 483KB - Virtual size: 483KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ