E:\SetExam\Netsim-dotnetconversion\CCNASIM\obj\Release\CCNASim.pdb
Static task
static1
Behavioral task
behavioral1
Sample
795e418010db7b6e0dc5b99f1058f660fcc58a82adfecf54b0c6086d32e6587f.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
795e418010db7b6e0dc5b99f1058f660fcc58a82adfecf54b0c6086d32e6587f.exe
Resource
win10v2004-20240412-en
General
-
Target
795e418010db7b6e0dc5b99f1058f660fcc58a82adfecf54b0c6086d32e6587f
-
Size
751KB
-
MD5
32280f6b13d67c687477f6488829f0c5
-
SHA1
8528b7bd3fb6931b3133ef2d585179ea7af64d77
-
SHA256
795e418010db7b6e0dc5b99f1058f660fcc58a82adfecf54b0c6086d32e6587f
-
SHA512
9b46ad8506b1f0fae9fecf0cdccfef8b088f86ec072d26a46d52e854fbe863de66b5736099fcbf7962f60826e4eda27854f7cbcd8fe55b6a2a811622b4dd459e
-
SSDEEP
12288:oAJJSqOp5OQ/iRyRLc1cjJIcur1ZNzb72GtlbJbU+G3A2wUkAAnYh7OLljjfM9WV:oAuuv2dDSJLKQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 795e418010db7b6e0dc5b99f1058f660fcc58a82adfecf54b0c6086d32e6587f
Files
-
795e418010db7b6e0dc5b99f1058f660fcc58a82adfecf54b0c6086d32e6587f.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 746KB - Virtual size: 745KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 119B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ