TwXr.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2b5b8b60ac84749f0eafd0baac2f04c71049e6dfb6f87f18b2f8dd09d1805d71.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2b5b8b60ac84749f0eafd0baac2f04c71049e6dfb6f87f18b2f8dd09d1805d71.exe
Resource
win10v2004-20240226-en
General
-
Target
3cc6052c8ecaeecc1c96f415e18d18525eed5b33bf3f16197ab715172825e402
-
Size
643KB
-
MD5
024200a7cd052dd681bb61d4a00e356e
-
SHA1
d898fa26905938207f882f3077c1099a9821a68b
-
SHA256
3cc6052c8ecaeecc1c96f415e18d18525eed5b33bf3f16197ab715172825e402
-
SHA512
98109cda3faea2d89918033744a238062ff4f15ef0e05a90f44d6774e9dafbf5ae1969a42c4f287c211f38b8b2804f017eaf137df903e3173495224e1a7269e0
-
SSDEEP
12288:Chae5WBJB6/GuOfYFPZialPr8Csfs4nBmslMfGZNFNSCLDIyySWpn:CdWs/+QRNPr3EvlMfgNFsCL0f7p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2b5b8b60ac84749f0eafd0baac2f04c71049e6dfb6f87f18b2f8dd09d1805d71.exe
Files
-
3cc6052c8ecaeecc1c96f415e18d18525eed5b33bf3f16197ab715172825e402.zip
Password: infected
-
2b5b8b60ac84749f0eafd0baac2f04c71049e6dfb6f87f18b2f8dd09d1805d71.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 713KB - Virtual size: 713KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ