aVbgmC.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d527dcddb63a8bdc7cb12aaadf990761f128e013e09c655aed823280c007d73a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d527dcddb63a8bdc7cb12aaadf990761f128e013e09c655aed823280c007d73a.exe
Resource
win10v2004-20240412-en
General
-
Target
acadcbb26f9e10847f6f8c0ceb6690f1015a13b202de40f1e6ea7670aeaf690b
-
Size
707KB
-
MD5
0e76615b05a206e3c0375dcfd4de4625
-
SHA1
ed883fd1a811a8d63697be1c6f0fc52430c9a70a
-
SHA256
acadcbb26f9e10847f6f8c0ceb6690f1015a13b202de40f1e6ea7670aeaf690b
-
SHA512
2a3d989d12ccbe54bb36b2ef45625c1fcaad830a31611ccf2d82b86cc6de06ce7d74e62342a01cb728cb9cfcfcb207e59875c2b4ff410c31c8ed6a0cf92dd572
-
SSDEEP
12288:OPqTUuXl6CgAYmBTkii7lLYexBP+HAmUZyBYvGtJlgRERxXwAn4xoeJa:OCTUuXMXO+iim8x+HAB6JlgOFnHeA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/d527dcddb63a8bdc7cb12aaadf990761f128e013e09c655aed823280c007d73a.exe
Files
-
acadcbb26f9e10847f6f8c0ceb6690f1015a13b202de40f1e6ea7670aeaf690b.zip
Password: infected
-
d527dcddb63a8bdc7cb12aaadf990761f128e013e09c655aed823280c007d73a.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 898KB - Virtual size: 897KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ