vSLy.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ce00b5a69092cf4b2a6f8c20e8f3cd5b8d1dfa27d946d9dca29413627a4ddfef.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ce00b5a69092cf4b2a6f8c20e8f3cd5b8d1dfa27d946d9dca29413627a4ddfef.exe
Resource
win10v2004-20240226-en
General
-
Target
7624db3cd00cde206060d5c32a5ff1b02f3155933f091985c06c0474fdcdca03
-
Size
652KB
-
MD5
cc5e222dc0008d3b43939aa221bec795
-
SHA1
beb3ac73b7078651cefd5ded4359f23a9a1b72df
-
SHA256
7624db3cd00cde206060d5c32a5ff1b02f3155933f091985c06c0474fdcdca03
-
SHA512
c5d4b14da3f1c12f3df9b45282d89240719722f92f3e5d9e7ae5586cc87e3d97c88d43eb91b645ede62fde57126483096707c1f6a3ed90f936d3c7ffb8ca01df
-
SSDEEP
12288:9/DmN4GSIIqr5HY4/Bfa65Op9EpJ4QDoA1UFnD0+BrEZlDu2j:9/c4GxYeFB5Op+T4ArKV/EZ1Bj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ce00b5a69092cf4b2a6f8c20e8f3cd5b8d1dfa27d946d9dca29413627a4ddfef.exe
Files
-
7624db3cd00cde206060d5c32a5ff1b02f3155933f091985c06c0474fdcdca03.zip
Password: infected
-
ce00b5a69092cf4b2a6f8c20e8f3cd5b8d1dfa27d946d9dca29413627a4ddfef.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 707KB - Virtual size: 706KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ