jnVU.pdb
Static task
static1
Behavioral task
behavioral1
Sample
9f287390bb4e8ba85e18600bf951603f8c8201485b9f4a3d7330997b0503c262.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
9f287390bb4e8ba85e18600bf951603f8c8201485b9f4a3d7330997b0503c262.exe
Resource
win10v2004-20240419-en
General
-
Target
9f287390bb4e8ba85e18600bf951603f8c8201485b9f4a3d7330997b0503c262.exe
-
Size
909KB
-
MD5
9c9a3c2324515541f6ca611671e9ac20
-
SHA1
fdc0aa8f734ba551b75eb08b9ad08d5133f3fd95
-
SHA256
9f287390bb4e8ba85e18600bf951603f8c8201485b9f4a3d7330997b0503c262
-
SHA512
827c2c4a9e0543b545c32e4a5d05cd016d6eade0a4c8af228f6c3323ae5360304c5026c3d15b92d883e1bf24c8c29a1055f1c1fb38058464a2d149d1443e6b43
-
SSDEEP
12288:0+Dbg6B778Qe0H2DUzG4/Ri3G6EfV3z4in+k1OdQRhWReoyAPI+YL1SfVOUrnyx:9g6Bp2Q/FDz40ZORznP1UZXbO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9f287390bb4e8ba85e18600bf951603f8c8201485b9f4a3d7330997b0503c262.exe
Files
-
9f287390bb4e8ba85e18600bf951603f8c8201485b9f4a3d7330997b0503c262.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 692KB - Virtual size: 692KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 216KB - Virtual size: 215KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ