Levitating.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2fcd88ffe3602711013c1c86e2e1f04ce05555f02e8f7729f5383c6e844c5237.exe
Resource
win7-20240221-en
General
-
Target
2fcd88ffe3602711013c1c86e2e1f04ce05555f02e8f7729f5383c6e844c5237.exe
-
Size
2.5MB
-
MD5
71f0aaab94850772d7ba0aa46076dc0e
-
SHA1
0437244a0c5040351eb1da38e9431747001a170e
-
SHA256
2fcd88ffe3602711013c1c86e2e1f04ce05555f02e8f7729f5383c6e844c5237
-
SHA512
69e434ae976a031bfb091518b7e5a955a7decd8653d168b90761db1b052401c84144370cd000d089f4df196c6ae9e77a9afba1e5cb9a284336ac0dfff3b5686a
-
SSDEEP
49152:iwzzXVdF9nxgXmoibwHzH0YsgQte12LK8cTj72Wqpzg+5DU3HfTS5JO:TzhkXmoibose172WuEvTS3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fcd88ffe3602711013c1c86e2e1f04ce05555f02e8f7729f5383c6e844c5237.exe
Files
-
2fcd88ffe3602711013c1c86e2e1f04ce05555f02e8f7729f5383c6e844c5237.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ