C:\Users\Administrator\Desktop\WindowsApplication1\WindowsApplication1\obj\x86\Debug\WindowsApplication1.pdb
Static task
static1
Behavioral task
behavioral1
Sample
379fe1eddbd1729b6f11a67d71090cc6895745f0a3964b7f26946a5f624184bf.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
379fe1eddbd1729b6f11a67d71090cc6895745f0a3964b7f26946a5f624184bf.exe
Resource
win10v2004-20240226-en
General
-
Target
379fe1eddbd1729b6f11a67d71090cc6895745f0a3964b7f26946a5f624184bf
-
Size
96KB
-
MD5
0b6efbade8fbeea50743d5b58d55b2cf
-
SHA1
dafeed13574aba35708170c119baf1f8ffd63141
-
SHA256
379fe1eddbd1729b6f11a67d71090cc6895745f0a3964b7f26946a5f624184bf
-
SHA512
23bd9c499213beee287efcfdbfa19c5fc6119e2891b2454bc25db74e1fc3fcd8a3778cf6a54d2266253c7bd370f022966364b0c0cd4d65ce0f907f9d2a18e253
-
SSDEEP
3072:dBpa0tIPv3jeK58Hn+O4KC9TNMLvD2irJ+j3nzDD//Bj3nzDD//2:d/duje/N4L9sd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 379fe1eddbd1729b6f11a67d71090cc6895745f0a3964b7f26946a5f624184bf
Files
-
379fe1eddbd1729b6f11a67d71090cc6895745f0a3964b7f26946a5f624184bf.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 161B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ