C:\_RU\WeAreChmnet\WeAreChmnet\obj\Debug\WeAreChmnet.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b22f4e6afdd77ab46111a7c8a3a5303e08cf307a57488f45f83218cc98f7d673.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b22f4e6afdd77ab46111a7c8a3a5303e08cf307a57488f45f83218cc98f7d673.exe
Resource
win10v2004-20240226-en
General
-
Target
7b2e1b061d090b670a532ea1ec64f50c0c806f92e79e64bd4d83e21093211784
-
Size
17KB
-
MD5
dee91c2d0f7264481d98057726d419e9
-
SHA1
59729160a7245e3e09726ca5de836d6ee173b833
-
SHA256
7b2e1b061d090b670a532ea1ec64f50c0c806f92e79e64bd4d83e21093211784
-
SHA512
deedb950da9b0bf561b045636aa51d8166e7d75acc7d89258e59399a86c12c6f36bab4be2db2cd426f0bc2b40f24e0392b32034fa214a4b76bafa9b0374a396e
-
SSDEEP
384:YaDMYtbXxAmQYS3fsdp4stpn83uIcsmYxy8+uHBHwWl2ioYpHOUCn:xIDmQYNIstp83xc5IyKBHwWzoYpHg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/b22f4e6afdd77ab46111a7c8a3a5303e08cf307a57488f45f83218cc98f7d673.exe
Files
-
7b2e1b061d090b670a532ea1ec64f50c0c806f92e79e64bd4d83e21093211784.zip
Password: infected
-
b22f4e6afdd77ab46111a7c8a3a5303e08cf307a57488f45f83218cc98f7d673.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ