SJLu.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4bc1924f2454b1fea340c0baab9b64a5f6304d1e24445f80177da5fe1a05fdfa.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4bc1924f2454b1fea340c0baab9b64a5f6304d1e24445f80177da5fe1a05fdfa.exe
Resource
win10v2004-20240412-en
General
-
Target
117799926c2e92ff632eb6f6be74778e0259420f76a83827d12b3525834b90d7
-
Size
654KB
-
MD5
1c5ddf05f27474d44c546710f971956d
-
SHA1
157c2145af2c6546f6098875cf0d289b94c6bb97
-
SHA256
117799926c2e92ff632eb6f6be74778e0259420f76a83827d12b3525834b90d7
-
SHA512
e1aab3cdf35c92f36cff50e93ca2765bfb0544d64c49f20acd10216b7305d1128f81e4611a8e2fda76cbf4e81b551594b9cc7ff3c9bcd12a577ec12dbe0dac4a
-
SSDEEP
12288:Ij6bjVQz61LSMjPcYNDzEhJsRtDLfmf+x+HfofINLc56sunucPe3D:xbf1uMjEwY6Lfs+xaf86sunlPe3D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/4bc1924f2454b1fea340c0baab9b64a5f6304d1e24445f80177da5fe1a05fdfa.exe
Files
-
117799926c2e92ff632eb6f6be74778e0259420f76a83827d12b3525834b90d7.zip
Password: infected
-
4bc1924f2454b1fea340c0baab9b64a5f6304d1e24445f80177da5fe1a05fdfa.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 722KB - Virtual size: 722KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ