C:\tktoolsuite\GRFEditor\GRFEditor\obj\x86\Release\GRF Editor.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8d92d86cd7f6857e924eb78389d750b42dbe4e6f17124cdc87518512c509b024.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
8d92d86cd7f6857e924eb78389d750b42dbe4e6f17124cdc87518512c509b024.exe
Resource
win10v2004-20240412-en
General
-
Target
8d92d86cd7f6857e924eb78389d750b42dbe4e6f17124cdc87518512c509b024
-
Size
4.6MB
-
MD5
23e21f5f04d66afb586086ae5f9a7ce8
-
SHA1
2b8bc00e5ad13637e1e127aba4d903b24765990b
-
SHA256
8d92d86cd7f6857e924eb78389d750b42dbe4e6f17124cdc87518512c509b024
-
SHA512
0f969a2a6fdc56d02af50a861c36cadd6d089ae35e2d86359dea93842c6b4a576a64e08a10e65ac1bb528f11b74c0d55ce7ed8984bf659c663f5827535afaafd
-
SSDEEP
98304:YxW3AayUYG5DBJ7+hm/m6ACry2nPB9NH9jvnGHfTgXrPow4h/CGO18sPDq2tCkz6:aWNyUJtJny2n5zHdG/0rf4VkDZeSQ3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d92d86cd7f6857e924eb78389d750b42dbe4e6f17124cdc87518512c509b024
Files
-
8d92d86cd7f6857e924eb78389d750b42dbe4e6f17124cdc87518512c509b024.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 4.6MB - Virtual size: 4.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ