gfYV.pdb
Static task
static1
Behavioral task
behavioral1
Sample
80c8ee15f76183a9f93327c7eb3e40a384ea744602aa14c2a2b4bc2476c11010.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
80c8ee15f76183a9f93327c7eb3e40a384ea744602aa14c2a2b4bc2476c11010.exe
Resource
win10v2004-20240412-en
General
-
Target
80c8ee15f76183a9f93327c7eb3e40a384ea744602aa14c2a2b4bc2476c11010.exe
-
Size
824KB
-
MD5
0ac1fd14f91e1a8ba33c20c745227a42
-
SHA1
02ef317af2f717ef2a66a291a65b4ce413c57288
-
SHA256
80c8ee15f76183a9f93327c7eb3e40a384ea744602aa14c2a2b4bc2476c11010
-
SHA512
0e8531f43cd746ac2c2cab9d1d7852d531401ae4cef9f7c38a5975e3fa1a68d95d4d06b9ecc079a41e7e6e8c739d7e6b4314c82d3a088fc324a493be62e21499
-
SSDEEP
12288:6ZCLTMHf/pE+PBC3J4ysPPkazp2BuEJrRNEcJwkgKGTcf:6ZKMHJE+Po3JhUp0uEJrR3WkgI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 80c8ee15f76183a9f93327c7eb3e40a384ea744602aa14c2a2b4bc2476c11010.exe
Files
-
80c8ee15f76183a9f93327c7eb3e40a384ea744602aa14c2a2b4bc2476c11010.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 822KB - Virtual size: 821KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ