VlEh.pdb
Static task
static1
Behavioral task
behavioral1
Sample
9e39036b1848c9867521dca9c5e351a69b235b42f760e714f20ae3465ef9b559.exe
Resource
win7-20240221-en
General
-
Target
d0a32aa804902edfd2b229bcb4c73be3.bin
-
Size
609KB
-
MD5
18a0c4e682343b404061980514baa011
-
SHA1
cf312cdd7c955ff61d9cfc058f0884ca64eb0208
-
SHA256
7906a80f5a4c8a3c99df99a706df36467b3fc6d059c4912426de26748370e9cb
-
SHA512
62570cabb2475947776ebd18e1bcb9d827d3dd9e3daef62f55278ac89ba21ab8ca750689be6a9b4563bd567019f14deeb4ce6d3a5a62bc1a5106eda2f4a97ea2
-
SSDEEP
12288:+fmDVzmOSl806nArchXUoTLuyfLl+Uysx+wYm3cW3YE3TSIE+qc4ee1g:+e9TSl8s0XUoTLuEaa+lm3cW3YEjblqO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/9e39036b1848c9867521dca9c5e351a69b235b42f760e714f20ae3465ef9b559.exe
Files
-
d0a32aa804902edfd2b229bcb4c73be3.bin.zip
Password: infected
-
9e39036b1848c9867521dca9c5e351a69b235b42f760e714f20ae3465ef9b559.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 624KB - Virtual size: 623KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ