p:\Target\x86\ship\setuptools\x-none\Flattener.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0ef906ca6ce4a95539491eae68ab9cba0c6315ecd704c146ee778e22d47a8aa4.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0ef906ca6ce4a95539491eae68ab9cba0c6315ecd704c146ee778e22d47a8aa4.exe
Resource
win10v2004-20240412-en
General
-
Target
0ef906ca6ce4a95539491eae68ab9cba0c6315ecd704c146ee778e22d47a8aa4
-
Size
2.0MB
-
MD5
964ee145cdbdafe60ba7c664970ff1c4
-
SHA1
3b7430941e0e41e68c0dc3bbb02d723c7a7f7dad
-
SHA256
0ef906ca6ce4a95539491eae68ab9cba0c6315ecd704c146ee778e22d47a8aa4
-
SHA512
547034d8bbfb47ec625d83b4d0e18f69cbd3954d5ffd0b2d406838a7546a61781a1e936c373d9596808eb4489a2ca0a79f19f761e58e212d73111f215f91e77a
-
SSDEEP
24576:doJdXN0BN2qnw4a+edxoBrLdggb59FF96X0JxQJlwrSI8LUlFl5Fp+:doJdXN0BMOwLloBrughNlcY/+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ef906ca6ce4a95539491eae68ab9cba0c6315ecd704c146ee778e22d47a8aa4
Files
-
0ef906ca6ce4a95539491eae68ab9cba0c6315ecd704c146ee778e22d47a8aa4.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ