C:\Users\JA\Downloads\plasmafreesrc\plasmaisud\PlasmaFree\obj\Release\Plasmafree.pdb
Static task
static1
General
-
Target
VoidFreeWoofer.exe
-
Size
13KB
-
MD5
f875761bd0edb3fe9712fa03a9e21c9f
-
SHA1
6ce6c47eaff91451136939303e86828fd096a6d1
-
SHA256
fa39fbf50de964d50eb6fda56862e82d881de424abb574d4c409cf76a822bc18
-
SHA512
b10f03185d79d95d4375a28950256ef352274c45dcc2b4efa589e901e5d207efb4321b59c8e246ff8825f2f7f4e305f8a96243a06d287e3d759574fc8242f074
-
SSDEEP
384:Z3gmWTwH5t0bwiTHZjMc7hXX22+zWMptYcFwVc03K:Z3gmas0bBT5oc7hXX8jtYcFwVc6K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VoidFreeWoofer.exe
Files
-
VoidFreeWoofer.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ