cmstp.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a6f487435e44db7c2dbbca82bb2128e484cf723d4142ce10eee443dd996432de.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a6f487435e44db7c2dbbca82bb2128e484cf723d4142ce10eee443dd996432de.exe
Resource
win10v2004-20240226-en
General
-
Target
a6f487435e44db7c2dbbca82bb2128e484cf723d4142ce10eee443dd996432de.exe
-
Size
81KB
-
MD5
371c90d1b3ba315383f27c327368cc8d
-
SHA1
ab6a752680c06173f4723a21d8f2c1fba377de11
-
SHA256
a6f487435e44db7c2dbbca82bb2128e484cf723d4142ce10eee443dd996432de
-
SHA512
8dd55a6b4364cc41f6c7f55ffe3d6524b5ef8b19c20ab885a3fbd9cdc355d1e1f36aa7b3d7b069e06e9d5b6af4b5dc3a202a653c1e437226da87796a31452e17
-
SSDEEP
1536:V1vysUnrftSK6pTY2PDPId1XnYUYKqH8RciU3:V5ysUnrftSKUbynzVqHgcik
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6f487435e44db7c2dbbca82bb2128e484cf723d4142ce10eee443dd996432de.exe
Files
-
a6f487435e44db7c2dbbca82bb2128e484cf723d4142ce10eee443dd996432de.exe.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ