CZUl.pdb
Static task
static1
Behavioral task
behavioral1
Sample
af83c0d8ccb38c430dce3b0c4a18eeda3c91832ae8bb432a9614619fd5727e7b.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
af83c0d8ccb38c430dce3b0c4a18eeda3c91832ae8bb432a9614619fd5727e7b.exe
Resource
win10v2004-20240412-en
General
-
Target
0514b13e04aebfc772fe6bf20c22f7bed964b4dddf5d9ddd3eabe791a8adf72c
-
Size
635KB
-
MD5
598abf8c1dc280af3f29065ea81a1d9b
-
SHA1
294d97ea10f5b1e347c5be0dd4aab945f5509506
-
SHA256
0514b13e04aebfc772fe6bf20c22f7bed964b4dddf5d9ddd3eabe791a8adf72c
-
SHA512
e366555932290f2d5c243933c130bb2e73fe904f95f9ed152c112a7e4e513dcfa30690294b187eae53b3fbda190c773aad5a4874f4613365678f25927366f379
-
SSDEEP
12288:DjJiDjNA2yqE/nj3ftiZ444ABOjwPTTL5YEaRQ++DnCJ36XKHEo0AL5gPdKvc:DdghyqEvjPkyWBOjmTHSpRQK2tw5KKU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/af83c0d8ccb38c430dce3b0c4a18eeda3c91832ae8bb432a9614619fd5727e7b.exe
Files
-
0514b13e04aebfc772fe6bf20c22f7bed964b4dddf5d9ddd3eabe791a8adf72c.zip
Password: infected
-
af83c0d8ccb38c430dce3b0c4a18eeda3c91832ae8bb432a9614619fd5727e7b.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 665KB - Virtual size: 664KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ