C:\Users\zaspe\Downloads\Testing-OnyxFN-main\Testing-OnyxFN-main\obj\Release\Timeline.pdb
Static task
static1
General
-
Target
Timeline.exe
-
Size
2.0MB
-
MD5
cddd5536c03089e69f183378e32c3230
-
SHA1
062210b2d884eb803eacc52317e1419fbf131c47
-
SHA256
d600ead90b32e934b762806860d12107ad5b0b642dca7c76374bca4956b21d0d
-
SHA512
665064d928e58bdb2e2b78bb6d1d43e19d88caa4d3de89bbecd9f4c1b64570e3fd2bdcae5d3a0b92075fbee986619ded0762dfa4c0ab6d47e357580c685c47db
-
SSDEEP
49152:H9UWlOJJJJJJJJJJJJJJJJJJJJJJJJJXLOJOdczqa7Tzhzabcc+c0xBsWWJJJJJf:AJJJJJJJJJJJJJJJJJJJJJJJJJXLoVGB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Timeline.exe
Files
-
Timeline.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ