C:\Windows\Containers\Confidential\DotnetGenerator\Stub\Projects\HFayo\obj\Release\HFayo.pdb
Static task
static1
Behavioral task
behavioral1
Sample
7bf5799b29b29518612d069a2bbab2499ece6404c555f73d8db37d167cf0379f.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
7bf5799b29b29518612d069a2bbab2499ece6404c555f73d8db37d167cf0379f.exe
Resource
win10v2004-20240226-en
General
-
Target
7bf5799b29b29518612d069a2bbab2499ece6404c555f73d8db37d167cf0379f.exe
-
Size
567KB
-
MD5
c3e5999b0dddb5ba2ad4a9001e015f2a
-
SHA1
377e0f7ec6fcd37fa8bb02ae8a57c5020603b1b4
-
SHA256
7bf5799b29b29518612d069a2bbab2499ece6404c555f73d8db37d167cf0379f
-
SHA512
42e86a0346a0c4a69dda4180076cc470d3f32a375aaeff57342727d77fcda57555b1d578305199512a944b976f268d3e5ca680bc6ae1c3294d43c13878fd345d
-
SSDEEP
12288:Gf2Ov+kR/c07tYZLyOJ1nlffll8QNOBf7sjqDz6/wM5pu+8:wFRU0BYZOEvlHkojSz632
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7bf5799b29b29518612d069a2bbab2499ece6404c555f73d8db37d167cf0379f.exe
Files
-
7bf5799b29b29518612d069a2bbab2499ece6404c555f73d8db37d167cf0379f.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ