D:\Projects\Programme\Grundbau\FL.FD\obj\x86\Release\FL.FD.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4e474770c2f952e8627b6d868197921d73fecbc0eace080f93993d6ffd332fd1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4e474770c2f952e8627b6d868197921d73fecbc0eace080f93993d6ffd332fd1.exe
Resource
win10v2004-20240412-en
General
-
Target
4e474770c2f952e8627b6d868197921d73fecbc0eace080f93993d6ffd332fd1
-
Size
344KB
-
MD5
bb0148ae3ab981ce85c06ae18701041f
-
SHA1
b08f5a683be6214fc068f69a7a86beeaea7c93f4
-
SHA256
4e474770c2f952e8627b6d868197921d73fecbc0eace080f93993d6ffd332fd1
-
SHA512
ac2ae26dd26f2bef71377d9e87f0a7aa065af094eed299c0af8aea910d93791a6ea04ae3fe0949bd2f91214eae2fd55da738a3a7fb3909ead81f16035a31a1e8
-
SSDEEP
6144:9sJXJdGHoou+LPK1ZS7fREWBu0hqQP618djkta+rcUbnWa+FIpaZOvTL6USA0cwp:IZ8Hoou+LS1ZUBBu0hqQNOSFIpZqUA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e474770c2f952e8627b6d868197921d73fecbc0eace080f93993d6ffd332fd1
Files
-
4e474770c2f952e8627b6d868197921d73fecbc0eace080f93993d6ffd332fd1.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 337KB - Virtual size: 336KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ