explorer.pdb
Static task
static1
Behavioral task
behavioral1
Sample
347795559ecf295360c41b1ee5a47b798f0cdfd8919f60229ba8eb50f1972bf1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
347795559ecf295360c41b1ee5a47b798f0cdfd8919f60229ba8eb50f1972bf1.exe
Resource
win10v2004-20240319-en
General
-
Target
347795559ecf295360c41b1ee5a47b798f0cdfd8919f60229ba8eb50f1972bf1.exe
-
Size
2.8MB
-
MD5
503b943cefa802951df977cfa0bedb43
-
SHA1
a7c5c0b9d2a6f9dd5138d139538592706f049a52
-
SHA256
347795559ecf295360c41b1ee5a47b798f0cdfd8919f60229ba8eb50f1972bf1
-
SHA512
1c2a62ae392a5f0f24acea7a554926ff60545970b7b8e2f89dc471fd0132f8d93c36d4b6a63aa4a1ba5920a5b5d11afbee32460b61b9e71cb6cb2bec2a08a1f8
-
SSDEEP
49152:+6tB0n409ugrEeg8vYYYYYYYYYYYRYYYYYYYYYYE3iA7/eFUJN9ojoso2xno1J:1t+4kugk8vYYYYYYYYYYYRYYYYYYYYYt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 347795559ecf295360c41b1ee5a47b798f0cdfd8919f60229ba8eb50f1972bf1.exe
Files
-
347795559ecf295360c41b1ee5a47b798f0cdfd8919f60229ba8eb50f1972bf1.exe.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 704KB - Virtual size: 704KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ