D:\zbra\AutoTool\PingCheck\StartPingCheck\Start\obj\Debug\Start.pdb
Static task
static1
Behavioral task
behavioral1
Sample
72575b07fb600b4b1ea653a6af49eab1c5a273a1c67e860a82fe449c7f6949e4.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
72575b07fb600b4b1ea653a6af49eab1c5a273a1c67e860a82fe449c7f6949e4.exe
Resource
win10v2004-20240226-en
General
-
Target
72575b07fb600b4b1ea653a6af49eab1c5a273a1c67e860a82fe449c7f6949e4
-
Size
12KB
-
MD5
d76e83d1d98001f7bd00abe3007a6ca9
-
SHA1
fa86004060d80fa3943b2af23f25777e3e3ef286
-
SHA256
72575b07fb600b4b1ea653a6af49eab1c5a273a1c67e860a82fe449c7f6949e4
-
SHA512
17543f665535ff7e4e644c5024c028b10ab6cb3909a5e93c53027ffa69b1d63b18650e395d1a80eb471bfceaa8f675845ae52aedfddd421570992aedd9f2edd9
-
SSDEEP
192:Dmoms3h3QbcEEUgH+ewGYnxkTDyVn+pj9phIR/F9SK5lfF+THzwRCNLvZEbfbu:g4xDyl+59pY/F9SK5lfFQHzBNLqbfb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72575b07fb600b4b1ea653a6af49eab1c5a273a1c67e860a82fe449c7f6949e4
Files
-
72575b07fb600b4b1ea653a6af49eab1c5a273a1c67e860a82fe449c7f6949e4.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ