Gfld.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2d06be8bd6be9b9902deaf301a938d58671cb27493829a1344aa9d16a8bc4b71.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2d06be8bd6be9b9902deaf301a938d58671cb27493829a1344aa9d16a8bc4b71.exe
Resource
win10v2004-20240412-en
General
-
Target
92ef1a62f8f69be2aff3a4bd4b99d2c961defb5c40f1772dc6b45216b7fb5cca
-
Size
821KB
-
MD5
f862e0612f963f5706b17a0abb88b2ec
-
SHA1
6b42496a4b5dd898b845bb6e4f9ecfb7d26682c8
-
SHA256
92ef1a62f8f69be2aff3a4bd4b99d2c961defb5c40f1772dc6b45216b7fb5cca
-
SHA512
94750299949642d60617bef7b1c71961d2fc7b845b7dabd3b6c5955f986a4717c1a81d2f24e98d57bf39169b289a9be2cde47aba02b01ff240006b6ea01f5045
-
SSDEEP
24576:M+2SwVpyOlzainlNeTlf9y9nuoctB7tUFUA+rg5gdcICNu/:M+4ZReNP70UfU5gdzCNC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2d06be8bd6be9b9902deaf301a938d58671cb27493829a1344aa9d16a8bc4b71.exe
Files
-
92ef1a62f8f69be2aff3a4bd4b99d2c961defb5c40f1772dc6b45216b7fb5cca.zip
Password: infected
-
2d06be8bd6be9b9902deaf301a938d58671cb27493829a1344aa9d16a8bc4b71.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 889KB - Virtual size: 889KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ