C:\Users\Soner\Documents\Visual Studio 2012\Projects\windowsdeafender\windowsdeafender\obj\Debug\windowsdeafender.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c78889386bdc0f43e1af9d7d411614e52e758b545740b1f716e7a5b9b817d618.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c78889386bdc0f43e1af9d7d411614e52e758b545740b1f716e7a5b9b817d618.exe
Resource
win10v2004-20231215-en
General
-
Target
c78889386bdc0f43e1af9d7d411614e52e758b545740b1f716e7a5b9b817d618
-
Size
185KB
-
MD5
1235a1511534bfa2f6525584f5188501
-
SHA1
487e3ab9cc8e0d641a463e65c440ec8d83c9c2d5
-
SHA256
c78889386bdc0f43e1af9d7d411614e52e758b545740b1f716e7a5b9b817d618
-
SHA512
b3eb79a3cfde82607a3f257a4847383106d52a960dfbfdc8f1d58b552e9390b3c97fcbb2a181f9a7f470bcfc498837f681905dcb261242bbe155631eaba33cbe
-
SSDEEP
3072:tDC7DlFGfYJ81QvpORN76iBywAEFeThQDHJPt:r7GEQmF1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c78889386bdc0f43e1af9d7d411614e52e758b545740b1f716e7a5b9b817d618
Files
-
c78889386bdc0f43e1af9d7d411614e52e758b545740b1f716e7a5b9b817d618.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ