C:\Users\Admin\Desktop\01\MemoryAppLoader\obj\Debug\AppLoader.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3de93584ba5aceefff8965aecf1b1e12f9b3fd746515513c5955c897c77158a7.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3de93584ba5aceefff8965aecf1b1e12f9b3fd746515513c5955c897c77158a7.exe
Resource
win10v2004-20240226-en
General
-
Target
3de93584ba5aceefff8965aecf1b1e12f9b3fd746515513c5955c897c77158a7
-
Size
7KB
-
MD5
17f063288a97354cfd0035a4a8562a3c
-
SHA1
dc7d17cdb8c53879252926c433728a4021992055
-
SHA256
3de93584ba5aceefff8965aecf1b1e12f9b3fd746515513c5955c897c77158a7
-
SHA512
0fa9d6bafd4dbb03c50326430761496d98eb953b1752766dd882e16fc9e9ca37d88df8b58efecec9fa6dba15bdc2576e257e3dd14a543ed48bd762aeb006dcc6
-
SSDEEP
96:P12mVT4OH0pO7+o42C0Yi9wEgJ6tujLlCuzNt:92ET4OUp4O4YiEJ6tudCo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3de93584ba5aceefff8965aecf1b1e12f9b3fd746515513c5955c897c77158a7
Files
-
3de93584ba5aceefff8965aecf1b1e12f9b3fd746515513c5955c897c77158a7.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ