C:\_RU\WeAreChmnet\WeAreChmnet\obj\Debug\WeAreChmnet.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f2b532450ed44fa884c0ea547b17a6a11524c2abc5a0b8278143d0b26604bbf9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f2b532450ed44fa884c0ea547b17a6a11524c2abc5a0b8278143d0b26604bbf9.exe
Resource
win10v2004-20240226-en
General
-
Target
c77ae10cd7597d1017cc003c77a25499102443b5b1c8a37999e60a4927bf702e
-
Size
17KB
-
MD5
2aaed2cbc70af4eecdd6218767c5fc7b
-
SHA1
52ba66521b7d26c7667c96f5e08190a287c43b08
-
SHA256
c77ae10cd7597d1017cc003c77a25499102443b5b1c8a37999e60a4927bf702e
-
SHA512
50d2a58cf33b10a9db0dcbb8541024e9b4878e5c0c91ffe278f817b059a7d6d493146bf72a58b20d3e4e6d0c01881591adade7ffdc30d2d4ff04f677f95bb78e
-
SSDEEP
384:rNv8rFlpLIOZrCF0q5vhTaBBeEWK4+G4b8WkkfNAGxPaqx/:rNvwlpwFj9aB0EWAV8JGNAGSqx/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/f2b532450ed44fa884c0ea547b17a6a11524c2abc5a0b8278143d0b26604bbf9.exe
Files
-
c77ae10cd7597d1017cc003c77a25499102443b5b1c8a37999e60a4927bf702e.zip
Password: infected
-
f2b532450ed44fa884c0ea547b17a6a11524c2abc5a0b8278143d0b26604bbf9.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ