C:\Users\FEDERIKO\Desktop\FEDERIKO\Key Logger\v2.5\stub\KBHook\obj\Release\Red Diamond.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d37f478f040a98f7dffb3796461fc354.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
d37f478f040a98f7dffb3796461fc354.exe
Resource
win10v2004-20240226-en
General
-
Target
d37f478f040a98f7dffb3796461fc354
-
Size
283KB
-
MD5
d37f478f040a98f7dffb3796461fc354
-
SHA1
7ee9472c04f53be5caecb8dc68a362d8a753ae0f
-
SHA256
c25773712337663be17f65293f7fbcd9152678a0f84f1f9e1e2e9c468d9b61ed
-
SHA512
e179b6f75fb6d051eb1c8b626f651f933843c701d9dad078b33d448e7c371bc3219191fc8ef1639ee6e74d188da68d5cfb9b84160ad12a21d32eee86740aba8d
-
SSDEEP
3072:a16vcjD/xnxP8VWUQd7UYz81XVuFEI1ZCM1PqG9pT632FszuZMrBl+tFauqwJybz:c6vW4Vs7elul2NGRZobaR8ie/FDuaQWB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d37f478f040a98f7dffb3796461fc354
Files
-
d37f478f040a98f7dffb3796461fc354.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 143B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 151KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ