C:\Users\Artur\Documents\Visual Studio 2015\Projects\Corcac\Corcac\obj\Debug\Corsac.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Corsac.exe
Resource
win10-20240404-en
General
-
Target
Corsac.exe
-
Size
19KB
-
MD5
dcbdfabd2081401507f1ce7afb4bd062
-
SHA1
c9c07d14dc3d6ec929974ec0d79b0762166ecaf1
-
SHA256
b19fb4f6c04f411b1a64a4de7a95eb80783880fa0391adcab3591cef2b17dde9
-
SHA512
1da4e6bed08117578beb3ab2943c4445d72b84f4ab38063ae5d4876679835d6856177a00b5ea7c6abd382b9673ce6feb50b2b713c52df35322fd692bd7aa081d
-
SSDEEP
384:bgnkS++R2Rnb99wYfvNPjRdfvMgYz4kxqpfnSrBicVefFBsujYcV64UwJFZb:0e95VHfWrYc+ZYcV6bw9b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Corsac.exe
Files
-
Corsac.exe.exe windows:4 windows x86 arch:x86
Password: 12345
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ