C:\Users\Yoye\Desktop\Outputs\zNHdzFVZNFvIrv.pdb
Static task
static1
Behavioral task
behavioral1
Sample
zNHdzFVZNFvIrv.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
zNHdzFVZNFvIrv.exe
Resource
win10v2004-20240419-en
General
-
Target
zNHdzFVZNFvIrv.exe
-
Size
185KB
-
MD5
327a06376dce413bf108947bd6707b18
-
SHA1
37e8f9310c342957b1cc2b6257962eea8e065567
-
SHA256
5c5129fb75c6338317e77860ac1b31739dd72160d5c3f24e3e48e92324196cc4
-
SHA512
9be8155857c7a3a3cea9567e3a7c5e87656c3f9240e5dcc269552829518919024ca2411dbd85a9926c264e2597b45ff7583d0b4829613c6390510aae46cb8546
-
SSDEEP
3072:6iu4ZVMK/uJlYT86knnt7i+KMj6GCqOXVSBvxgxd:m+HO2knntr6COABvxy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource zNHdzFVZNFvIrv.exe
Files
-
zNHdzFVZNFvIrv.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 182KB - Virtual size: 181KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ