D:\برمجة\CosaNostra\keylogger\keylogger\obj\Debug\svhost.pdb
Static task
static1
Behavioral task
behavioral1
Sample
test3.exe
Resource
win10-20240404-en
General
-
Target
test3.exe
-
Size
109KB
-
MD5
2d32df539b71416107e87c5d27ea1e64
-
SHA1
3923ade1ad7f3d1a756ff180f8bd2d062e927e60
-
SHA256
a5b047e26c7f2db43a5746b8a20d14b3d50f2ad0e2d64bb50cac64eb48a1aaaa
-
SHA512
f4164282baa1f8ffa45e146a966a84d3b85e97c6fdd8b1f1cc43bd47ec1422c3e3657bed09d1b2414dbd801882a396792f4dd1bd18387af3192b3e2cfd91efaa
-
SSDEEP
1536:Au4H0AJr76UTiNZ2f4CQmwGdGV84ButKkX2fH6CNi:Au4UAR6UAZ2gC95s84ItKkX2vNNi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource test3.exe
Files
-
test3.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 95KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ