D:\Проекты\Общие документы\Obmen\obj\Release\MyServer_backup.pdb
Static task
static1
Behavioral task
behavioral1
Sample
bd5881b19e552942e71b775dbfc358c249871d0713cdbe0ecffdbbeadcd179e4.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bd5881b19e552942e71b775dbfc358c249871d0713cdbe0ecffdbbeadcd179e4.exe
Resource
win10v2004-20240508-en
General
-
Target
bd5881b19e552942e71b775dbfc358c249871d0713cdbe0ecffdbbeadcd179e4
-
Size
25KB
-
MD5
1e13e5ec5fd10645991d313e0129fd63
-
SHA1
a3945adabec08618c9a10503ae3d5d23e3b9dae2
-
SHA256
bd5881b19e552942e71b775dbfc358c249871d0713cdbe0ecffdbbeadcd179e4
-
SHA512
4313c4a523f666cda089a6f6f0b8ba6d74a180641c0b4268641eab46f18d67ca5d233776e7c35d4066d8c21e39293448e667aec616bec4c63d2068261cdd54e0
-
SSDEEP
768:hj4coZttgCmK69xGLh/Xuak06BsCdorFW:J4NsGt3kcm8FW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd5881b19e552942e71b775dbfc358c249871d0713cdbe0ecffdbbeadcd179e4
Files
-
bd5881b19e552942e71b775dbfc358c249871d0713cdbe0ecffdbbeadcd179e4.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ