E:\VS-Entwicklung\DLI-PartnerBase\obj\Release\DLI-PartnerBase.pdb
Static task
static1
Behavioral task
behavioral1
Sample
accea0fedf32eedb5b5e2f4c238a40d8f945c1b68bb44e05c8a79ec4adf6ba1d.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
accea0fedf32eedb5b5e2f4c238a40d8f945c1b68bb44e05c8a79ec4adf6ba1d.exe
Resource
win10v2004-20231215-en
General
-
Target
accea0fedf32eedb5b5e2f4c238a40d8f945c1b68bb44e05c8a79ec4adf6ba1d
-
Size
195KB
-
MD5
cf1782cdf656efe06aec528130137274
-
SHA1
4071529752245aef32b1a1a87b80b0f48068965b
-
SHA256
accea0fedf32eedb5b5e2f4c238a40d8f945c1b68bb44e05c8a79ec4adf6ba1d
-
SHA512
87856aa473d641bb5e99a800bf903c43847c16562bdc072377575482bab31e2604e15c5da04f3cd4fa7a97a32209d99ec3b7ddc81dde5fc72f20fbd7d1b03d2f
-
SSDEEP
3072:IioD0hiMfydUT5MDgNDaD0xKXhtMI2UApboDD9OMDgNDaD0xKX/:IiKmfCaOD0AXnMVpQDBaOD0AX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource accea0fedf32eedb5b5e2f4c238a40d8f945c1b68bb44e05c8a79ec4adf6ba1d
Files
-
accea0fedf32eedb5b5e2f4c238a40d8f945c1b68bb44e05c8a79ec4adf6ba1d.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 159KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ