D:\Projects\TopMostFriend\TopMostFriend\obj\Release\TopMostFriend.pdb
Static task
static1
General
-
Target
TopMostFriend.exe
-
Size
127KB
-
MD5
cb2740259b7b7cbb9ae9760d13ffd887
-
SHA1
29ebf03485128af44917835121356fcf14f4229f
-
SHA256
7184ead43fdb9315eb2f972ee2c893ac16c8122ff4b411c58727dae05ee5b727
-
SHA512
a99ea4483298c6da93230b756427b7f87d9b4b401d9b8b5a15b4ee2a0f3e7e6e1a6efa17d9e0d083f153e27421f80ed29047ec20c7ebef0aa9819ea5dcdf92d9
-
SSDEEP
3072:DP5czdfPRULQ6mzRSz+ct2cmaEQCI/vn6ApIhmR1Ys7ri+:DP5aPrzUSct205CgC0DYs7rH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource TopMostFriend.exe
Files
-
TopMostFriend.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 121KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ