gyhy.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d82d38f0e16b8bc4210a0d34561a6d2331c46061542012f6c1105ea17bc92f5b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d82d38f0e16b8bc4210a0d34561a6d2331c46061542012f6c1105ea17bc92f5b.exe
Resource
win10v2004-20240226-en
General
-
Target
0a02feb0ecb24ef6567865a867d1d6c0cf29ce9b3c8a8eebf31bcc9f2c98bfed
-
Size
696KB
-
MD5
83bc13a97942a8829de87f0aba6c9923
-
SHA1
fd7d974a027150179272e1e470d1f4c8b6594f30
-
SHA256
0a02feb0ecb24ef6567865a867d1d6c0cf29ce9b3c8a8eebf31bcc9f2c98bfed
-
SHA512
2eebeeb5c2bb840dcdd59cb301f83e5d6acf35a0393a239d5297b1269bdb26764b045fea5a68d79a6fba031a64ee0aa50f689f495aae1d021a27606d0d04a072
-
SSDEEP
12288:AxU7AQuAiw3FmT9TT5XN+NNp3EqTX5I1wM/GPrOPK6Ot5ACvEjcxn7EpS:AaVuAik8TThN+Nz3Eq9JOy6q/vEM7EpS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/d82d38f0e16b8bc4210a0d34561a6d2331c46061542012f6c1105ea17bc92f5b.exe
Files
-
0a02feb0ecb24ef6567865a867d1d6c0cf29ce9b3c8a8eebf31bcc9f2c98bfed.zip
Password: infected
-
d82d38f0e16b8bc4210a0d34561a6d2331c46061542012f6c1105ea17bc92f5b.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 765KB - Virtual size: 764KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ