c:\users\pc\documents\visual studio 2017\Projects\Programlama_Teknikleri\hafta_uyg2\obj\Debug\hafta_uyg2.pdb
Static task
static1
Behavioral task
behavioral1
Sample
bac021740f6a6173bc047c556e2456325b69bb93581f95801a146afa678675ad.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bac021740f6a6173bc047c556e2456325b69bb93581f95801a146afa678675ad.exe
Resource
win10v2004-20240412-en
General
-
Target
bac021740f6a6173bc047c556e2456325b69bb93581f95801a146afa678675ad
-
Size
5KB
-
MD5
36e143c91232341992596e1e0c327d51
-
SHA1
7f0b45038cffc568b5d14507c52e8188ef350113
-
SHA256
bac021740f6a6173bc047c556e2456325b69bb93581f95801a146afa678675ad
-
SHA512
8ec65043e555b3b9326c9c38e17c6b9a6b2d29d14de467a8ad33de721d6b97668002be7dffa42b0b7f7bf64d48bfa3a8e18e9fb7c20a03407c4f2392dd507d3b
-
SSDEEP
48:6Ia3VSdZ0ppkuZuXZyfKt/6NMlO8RV7XN6yE54tM27lXfhHHhznuFCpfbNtm:KyHFb15VrBlpHBJzNt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bac021740f6a6173bc047c556e2456325b69bb93581f95801a146afa678675ad
Files
-
bac021740f6a6173bc047c556e2456325b69bb93581f95801a146afa678675ad.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ