D:\Kworld Source\ScreenShare 2.0_LatestBuild\win32\PMPlayer\NomalAP\ViVAClient\obj\Release\ScreenShare.pdb
Static task
static1
Behavioral task
behavioral1
Sample
fe33fad16e3782e543500e4a8cdd03c8faef2be71a86d15e1db3a96c67cbe3c3.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fe33fad16e3782e543500e4a8cdd03c8faef2be71a86d15e1db3a96c67cbe3c3.exe
Resource
win10v2004-20240412-en
General
-
Target
fe33fad16e3782e543500e4a8cdd03c8faef2be71a86d15e1db3a96c67cbe3c3
-
Size
771KB
-
MD5
9a17e5d8d986c1b842cff62ab4c6eddc
-
SHA1
31e0109a03b51c3a62a311406f9d00a6c565bca6
-
SHA256
fe33fad16e3782e543500e4a8cdd03c8faef2be71a86d15e1db3a96c67cbe3c3
-
SHA512
47b4c397742889ad0cec71aafeb4b4d83dfdbb70d43ada4d3dba77e17fab1d38232c267e2b7ae730f8d309b283f87c47bcd4ce6170224de36504139a7f83c8fe
-
SSDEEP
6144:OAgXQedlrXKWTMebZX9fAanYiicf85OS2WTMerZX9f:OD7d1XKWTMSBnYiicf8QWTM6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe33fad16e3782e543500e4a8cdd03c8faef2be71a86d15e1db3a96c67cbe3c3
Files
-
fe33fad16e3782e543500e4a8cdd03c8faef2be71a86d15e1db3a96c67cbe3c3.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 650KB - Virtual size: 650KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ