VyAh.pdb
Static task
static1
Behavioral task
behavioral1
Sample
32462924b1f299b10b84dee93c0ebc876811da42dd74c6fa942c217172a26a3f.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
32462924b1f299b10b84dee93c0ebc876811da42dd74c6fa942c217172a26a3f.exe
Resource
win10v2004-20240412-en
General
-
Target
440d269a202966aac835aaede736fe8700a0dd0b88f2400d189fcc4d43461ac5
-
Size
790KB
-
MD5
b8de3be3772bd1b693da6cbedbef1a6b
-
SHA1
6d32e44dc3e4a4f5595e8a473d33bca25ce2aefd
-
SHA256
440d269a202966aac835aaede736fe8700a0dd0b88f2400d189fcc4d43461ac5
-
SHA512
459cc6293f8d96185870883455ae5005cba4c7686dcedaff58417370e33b76bde94a99ce6beb97cfa616ac8872594b2fcb9e118cbca56d7e353e27e2a0e4092c
-
SSDEEP
12288:CDc/hoJmWJs4JnpC4lT2zxKI1nag0CP4KqZcxARkb0bW1iZojK7x38cq7nQjFuk1:CM3WbBN2zs0MKNZb0b7ZeQMBQjF2P5q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/32462924b1f299b10b84dee93c0ebc876811da42dd74c6fa942c217172a26a3f.exe
Files
-
440d269a202966aac835aaede736fe8700a0dd0b88f2400d189fcc4d43461ac5.zip
Password: infected
-
32462924b1f299b10b84dee93c0ebc876811da42dd74c6fa942c217172a26a3f.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 849KB - Virtual size: 848KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ