lJvT.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c68376bcbfd140e682ba3b0f7535af83a9653b63f090718ce028a9a65514959b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c68376bcbfd140e682ba3b0f7535af83a9653b63f090718ce028a9a65514959b.exe
Resource
win10v2004-20240419-en
General
-
Target
c68376bcbfd140e682ba3b0f7535af83a9653b63f090718ce028a9a65514959b.exe
-
Size
599KB
-
MD5
e0f288a7108a42a623bfeb29b27a3643
-
SHA1
1d5b4a130ed109335b4ae939fd9756afc2a161b2
-
SHA256
c68376bcbfd140e682ba3b0f7535af83a9653b63f090718ce028a9a65514959b
-
SHA512
b0f0c97c7e1c6450b112fe6794a99a54ad0ac7c8a746edd214d6ce8e52fb625b75e892f30d96548c04e169f786656cbf1d52cf9571275b92dc13666923e199c4
-
SSDEEP
12288:taXiAEfDBDNm/UMNCZ2COqjKJHVKGgtCZ7jc1ESm5:aRE7BxUbNZqKZVtf7jWm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c68376bcbfd140e682ba3b0f7535af83a9653b63f090718ce028a9a65514959b.exe
Files
-
c68376bcbfd140e682ba3b0f7535af83a9653b63f090718ce028a9a65514959b.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 583KB - Virtual size: 582KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ