C:\Reverse Engineering\c# crcked\AJTempV5\obj\Release\AJTempV5.pdb
Static task
static1
Behavioral task
behavioral1
Sample
AJTempV5.exe
Resource
win10v2004-20240226-en
General
-
Target
AJTempV5.exe
-
Size
15KB
-
MD5
456670ad28d3c61e31adc5a8383ee304
-
SHA1
a78c87fa09013a8d98fee0436bd378c0de6d3a5b
-
SHA256
0c6409ab8a9c0308979796b5b70fa97f0e1fd201341f4a0b97f18f965d98b08e
-
SHA512
c9cbb10f24066c22354dfb1bbd95bfb18d14c47fe609997da1427dd9f4c8ea320200d960b64b8ed57b168abd3fba4a553806169e39ccd27fd190837871275286
-
SSDEEP
384:dVYxq0FbnZJusvlXlDDj2+d/Fz/oc5tu/sxi3hFW:dVYxqSbZsEXpP2+dxAc5tu/sxYhY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource AJTempV5.exe
Files
-
AJTempV5.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ