C:\Users\Ninja\Desktop\Rat\amsiwala\amsiwala\obj\Debug\amsiwala.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a718b35a3a772109f0ac0da3dc524155148b801fcb26e263d6eaff3573bf8bbb.exe
Resource
win7-20240221-en
General
-
Target
a718b35a3a772109f0ac0da3dc524155148b801fcb26e263d6eaff3573bf8bbb.zip
-
Size
2.3MB
-
MD5
c0b1679075b85eaa8a2516644ecfd037
-
SHA1
449ea8a44827d2cd103771f768cf33d7546e7cf4
-
SHA256
6b854bcfe1c76edf25f33ca006de53fa0501d669358d7aeb36822da10bdfe66b
-
SHA512
7740f9931254c96eb5a1de7a6daa9323e930ac10e5b44094378083a708b09866c5b17bd5e450835c5a0cce99624b64510d4dde13356dcfa4d7bf372f83c32ca6
-
SSDEEP
49152:GZOxGWjvdIiYwzUhHxSL2K1cz2Ux58ziwt3l+TTWVzOunWvW:GZOxDOiYwzExSiKy/Rwt3dnWvW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/a718b35a3a772109f0ac0da3dc524155148b801fcb26e263d6eaff3573bf8bbb
Files
-
a718b35a3a772109f0ac0da3dc524155148b801fcb26e263d6eaff3573bf8bbb.zip.zip
Password: infected
-
a718b35a3a772109f0ac0da3dc524155148b801fcb26e263d6eaff3573bf8bbb.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ