C:\Users\dildon\Source\Repos\ConsoleApp1\ConsoleApp1\obj\Debug\ConsoleApp1.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8a4620c027661d01fe46cc055f621000b7e6bb681c159e58cc0d59c681e06433.exe
Resource
win7-20240221-en
General
-
Target
df15a783d2a45663daffc435c6aef0e6dc03ad3bbcb40f0eb1bbdece7c85667e
-
Size
142KB
-
MD5
31306dbf39262d94adb55e723838792f
-
SHA1
9e93dfc99a15da4ebc5aa5bac2c15e2d14b95d84
-
SHA256
df15a783d2a45663daffc435c6aef0e6dc03ad3bbcb40f0eb1bbdece7c85667e
-
SHA512
985b94cda0bdfafe50afed06f4479548bee45bc7e80f510034197d5b1785445a881835f8e978ec10ffb30a076906feddb949032f552eb6dce08e8de8314c1fe5
-
SSDEEP
3072:3OJ+2FXl16Ab2iXTz3vdEvuWvEWsn+Ry6TDjnnQgRR0zzHImleNXdGVD6oYLu:+J+2Jl4LiX33VEmWv1DJ/p0zzvwzG0Xy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/8a4620c027661d01fe46cc055f621000b7e6bb681c159e58cc0d59c681e06433.exe
Files
-
df15a783d2a45663daffc435c6aef0e6dc03ad3bbcb40f0eb1bbdece7c85667e.zip
Password: infected
-
8a4620c027661d01fe46cc055f621000b7e6bb681c159e58cc0d59c681e06433.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 494KB - Virtual size: 494KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ