C:\qp5xg357i2\obj\Release\Current.pdb
Static task
static1
Behavioral task
behavioral1
Sample
391da8243c814cb635942aae0339f210f3520fab3360220d3c68cde1438bd83c.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
391da8243c814cb635942aae0339f210f3520fab3360220d3c68cde1438bd83c.exe
Resource
win10v2004-20240412-en
General
-
Target
391da8243c814cb635942aae0339f210f3520fab3360220d3c68cde1438bd83c
-
Size
363KB
-
MD5
e720940033d0a875c83f019ee7418487
-
SHA1
872728a8b723b37735a5eaeb35516f747b6b4f17
-
SHA256
391da8243c814cb635942aae0339f210f3520fab3360220d3c68cde1438bd83c
-
SHA512
bb6aebe4e825c72460ff6cc6b6ac17a23033e0faff0ff7c8d2d0a6781459ef5044ff482410863b46dc5f683512e602f7a04a17528ee9d8292f24fddabbb31cdf
-
SSDEEP
6144:wORjQKzqpAnLBZzxKnCoPoMiqbk9MKbzZJR7oM79fI7L+ZQe0cczk:7YSnFLKnCoXiqbkusj9jC+QPccY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 391da8243c814cb635942aae0339f210f3520fab3360220d3c68cde1438bd83c
Files
-
391da8243c814cb635942aae0339f210f3520fab3360220d3c68cde1438bd83c.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 361KB - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ