D:\4.0FrameworkLatestProjects\eTimeTrackLite 4.0\eTimeTrackLite 4.0\WebScheduler\obj\Release\WebScheduler.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ca26f6c33d67ec5b6aba1da8a796a49b98d12a6e372d906fa714ae4fb52c3777.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ca26f6c33d67ec5b6aba1da8a796a49b98d12a6e372d906fa714ae4fb52c3777.exe
Resource
win10v2004-20240419-en
General
-
Target
ca26f6c33d67ec5b6aba1da8a796a49b98d12a6e372d906fa714ae4fb52c3777
-
Size
212KB
-
MD5
d63c0391f84ede3067aa573246212446
-
SHA1
61bd3899d827ef79327b860211858325559d5195
-
SHA256
ca26f6c33d67ec5b6aba1da8a796a49b98d12a6e372d906fa714ae4fb52c3777
-
SHA512
7812b3668f2453f4b3b8bf26b613d7edfbaaf2c2c94270dbb42697d1590564fb6226e560a8dde1d04a21a64eadbdecb2a608cb5ff354aa5008f5b3c7f68c7e5f
-
SSDEEP
3072:9Qvbs6GTGKsA/XO7ereJDPFLskvFYXtADQvbs6GTG:qvbs6GTGUpreJD9APvbs6GTG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca26f6c33d67ec5b6aba1da8a796a49b98d12a6e372d906fa714ae4fb52c3777
Files
-
ca26f6c33d67ec5b6aba1da8a796a49b98d12a6e372d906fa714ae4fb52c3777.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 142KB - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 162B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ