J:\derby\Potato_DERBYCON_EDITION_release_justbytes\Potato\Potato\bin\Release\rottenpotato.pdb
Static task
static1
Behavioral task
behavioral1
Sample
29cc79a451f73bac43dbe9455d2184770beae69f4e6bc2d824abd2cfbedf53f1.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
29cc79a451f73bac43dbe9455d2184770beae69f4e6bc2d824abd2cfbedf53f1.exe
Resource
win10v2004-20240226-en
General
-
Target
29cc79a451f73bac43dbe9455d2184770beae69f4e6bc2d824abd2cfbedf53f1
-
Size
664KB
-
MD5
b8458d393443ca9b59f4d32a5d31e4f7
-
SHA1
613efd1d13d461c7f0833c8c9410e0ccf414e7d9
-
SHA256
29cc79a451f73bac43dbe9455d2184770beae69f4e6bc2d824abd2cfbedf53f1
-
SHA512
367f6910d167a0f9ec31323cfdbf2fa1e28d3b5494335a9b4e7756fe16d8cb83eb3722a3cb3a726e6d28e465a6ecab39579a9d9783b70bd5f038c1e87d991c07
-
SSDEEP
12288:gnzXuCE75tp+D+YhYZq1vW6Jn4O5zJGYk9WBC:eXuLoWg5zJR2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29cc79a451f73bac43dbe9455d2184770beae69f4e6bc2d824abd2cfbedf53f1
Files
-
29cc79a451f73bac43dbe9455d2184770beae69f4e6bc2d824abd2cfbedf53f1.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 661KB - Virtual size: 661KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ