pFgK.pdb
Static task
static1
Behavioral task
behavioral1
Sample
318ce8d60171fa69f94ce6b2ce0f097f8b1e89fea5a34a0544077a084e2076b1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
318ce8d60171fa69f94ce6b2ce0f097f8b1e89fea5a34a0544077a084e2076b1.exe
Resource
win10v2004-20240226-en
General
-
Target
318ce8d60171fa69f94ce6b2ce0f097f8b1e89fea5a34a0544077a084e2076b1
-
Size
999KB
-
MD5
bc870a47c0433c9b92f2687aa374f1bc
-
SHA1
4ceb1b75e1d46b452ab63a538f520ba2237a8fb6
-
SHA256
318ce8d60171fa69f94ce6b2ce0f097f8b1e89fea5a34a0544077a084e2076b1
-
SHA512
bad245cf01aaf918dccdfebaba6e3c0d0f957b9d6842b28e844277f62980f6e87c8f751fa18b79609d09131cb438f2a20f28ff8c67816f356794eae3bde21ef2
-
SSDEEP
12288:0Mm4NBZgBvdXiJBZsIyls50+4Ov3ibsDm90m2bYyOGg+rCPAqRvbbIN5:Pm4NNJ/3yl0r4M3iA69PeYFY8v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 318ce8d60171fa69f94ce6b2ce0f097f8b1e89fea5a34a0544077a084e2076b1
Files
-
318ce8d60171fa69f94ce6b2ce0f097f8b1e89fea5a34a0544077a084e2076b1.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 996KB - Virtual size: 996KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ