C:\Windows\Containers\Confidential\DotnetGenerator\Stub\Projects\AshterZatra\obj\Release\AshterZatra.pdb
Static task
static1
Behavioral task
behavioral1
Sample
db38d314aa7edea0b879e15c3b22af7bdc92a215642b78b673afb62ff19866d7.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
db38d314aa7edea0b879e15c3b22af7bdc92a215642b78b673afb62ff19866d7.exe
Resource
win10v2004-20240412-en
General
-
Target
db38d314aa7edea0b879e15c3b22af7bdc92a215642b78b673afb62ff19866d7.exe
-
Size
916KB
-
MD5
f9c2262f0aa2b479a4fe1b062a74c6e2
-
SHA1
caec2f6838806eacd495a1bddf84d45b8199a912
-
SHA256
db38d314aa7edea0b879e15c3b22af7bdc92a215642b78b673afb62ff19866d7
-
SHA512
c000154972d75f26e5f4f99977689c2c1bbe2bf1dc919097a70fdd5548859d8f96557c0916b4c0598f185661dd1f9316d2ae4e1a0d6bdde3e7dc31279c0e70fe
-
SSDEEP
24576:+mI5ZbFc7iC39vQbn0nferzN+vcX8IPayoPR8v0SgU:+fh4z39GOf4zc+8I4PRvSx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db38d314aa7edea0b879e15c3b22af7bdc92a215642b78b673afb62ff19866d7.exe
Files
-
db38d314aa7edea0b879e15c3b22af7bdc92a215642b78b673afb62ff19866d7.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ