c:\Windows\Temp\pvkpznz5\pvkpznz5.pdb
Static task
static1
Behavioral task
behavioral1
Sample
cb1595a13976caa88f9e76bad3758a87.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
cb1595a13976caa88f9e76bad3758a87.exe
Resource
win10v2004-20240226-en
General
-
Target
cb1595a13976caa88f9e76bad3758a87
-
Size
6KB
-
MD5
cb1595a13976caa88f9e76bad3758a87
-
SHA1
7e3ea7063779751ddc94c9ba3725417dcce78ab0
-
SHA256
3c3b8e6a70601519b5bd2970cea147849fed5a5cfc711645a8a3681f1fa70b83
-
SHA512
06ca7f8e95042f517019fbccd88b078bdfd8b94b1f0ef6c0875342f8a1d93842ddd8efd0ed5005b1a03f0cc692e0b3e498b982c0598faa9cb22a36085e19342b
-
SSDEEP
96:RbrbZ9AFolidvBpy/JIskECtVttocKOzNt:lpKoC68EesI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb1595a13976caa88f9e76bad3758a87
Files
-
cb1595a13976caa88f9e76bad3758a87.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ