F:\Ventoy\Ventoy2Disk\x64\Release\Ventoy2Disk_X64.pdb
Static task
static1
Behavioral task
behavioral1
Sample
7f4c55e10aa8e36ac204d3c926fa4f69b74a683e35ccfccd8b54fe85a6b03706.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
7f4c55e10aa8e36ac204d3c926fa4f69b74a683e35ccfccd8b54fe85a6b03706.exe
Resource
win10v2004-20240412-en
General
-
Target
7f4c55e10aa8e36ac204d3c926fa4f69b74a683e35ccfccd8b54fe85a6b03706
-
Size
12.1MB
-
MD5
fbd0e5ee224cc97f22a91d710f665a98
-
SHA1
7baa606c31aba5ffb0722d640f5a7bb110992e1b
-
SHA256
7f4c55e10aa8e36ac204d3c926fa4f69b74a683e35ccfccd8b54fe85a6b03706
-
SHA512
1b0b557b37452779a38ff636f7a507224a263a32e865a58dc1957b48768809eae0a4b8aac898fe1d40392e35d07e2d291b5f1807f8f8080ee58776a7deaf9db3
-
SSDEEP
98304:9lmjF6L3rvdHfDFg7kICxP2eAKlajWS+PED9n9e6H+SNMH+I:9lmEL3rvd/DGPCJZSD9Q8j8+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7f4c55e10aa8e36ac204d3c926fa4f69b74a683e35ccfccd8b54fe85a6b03706
Files
-
7f4c55e10aa8e36ac204d3c926fa4f69b74a683e35ccfccd8b54fe85a6b03706.exe windows:6 windows x64 arch:x64
757f4142624ad2f93e4770d7b35dc4da
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
kernel32
GetFullPathNameA
GetTickCount
GetCurrentProcessId
GetTempPathA
FindResourceA
Sleep
VirtualProtect
Sections
.text Size: 225KB - Virtual size: 225KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 242KB - Virtual size: 241KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rdata0 Size: 11.5MB - Virtual size: 11.5MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l1 Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE