C:\Users\Dimon\Desktop\GUID\GUIDdmd\obj\Debug\net8.0-windows\GUIDdmd.pdb
Static task
static1
Behavioral task
behavioral1
Sample
806e0e07578706966120be588d717807dfea1c9a8a044dc21b0247af0e94ac57.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
806e0e07578706966120be588d717807dfea1c9a8a044dc21b0247af0e94ac57.exe
Resource
win10v2004-20240426-en
General
-
Target
806e0e07578706966120be588d717807dfea1c9a8a044dc21b0247af0e94ac57
-
Size
1.5MB
-
MD5
fd04cb253a61892a47183ab2a7053fad
-
SHA1
fa223d949bffe0c85f09909a219268c9d0df3aa9
-
SHA256
806e0e07578706966120be588d717807dfea1c9a8a044dc21b0247af0e94ac57
-
SHA512
41d8cf72079cd466528daba459831b288bf2108fa746d9703babd21ca03a69d79c5d971e29ffc3071a42af195171c7fc7174f755b56728a0364a9c3d03219d25
-
SSDEEP
24576:HH2ydhelchLrBhfwsc/EVvNnmbjg+j5N6q2YNZUk6krwd3/okA94xOj9jh6t++Ms:HIcnfDNnKdjiqFUkJyA4xOf6qO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 806e0e07578706966120be588d717807dfea1c9a8a044dc21b0247af0e94ac57
Files
-
806e0e07578706966120be588d717807dfea1c9a8a044dc21b0247af0e94ac57.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ