C:\Users\Windows\Documents\Cheats PW\Bot Copy all\Auto_Target\obj\Release\MoveToDungeon 155v3.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b7107aed7b751ae806b7a17fc671786392761f515e95d35c1b5fd0d506b75a63.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b7107aed7b751ae806b7a17fc671786392761f515e95d35c1b5fd0d506b75a63.exe
Resource
win10v2004-20240426-en
General
-
Target
b7107aed7b751ae806b7a17fc671786392761f515e95d35c1b5fd0d506b75a63
-
Size
253KB
-
MD5
4d04ce0c455bcf67fd53d69bb59af371
-
SHA1
ef36020bcd87b85833c2bc8d05a21ba43c804028
-
SHA256
b7107aed7b751ae806b7a17fc671786392761f515e95d35c1b5fd0d506b75a63
-
SHA512
90caec66f93f2529becffb066bd3fe6226e5a42b9b14d7dfe8411a6e41530eccbd153d6245faee50f77ae3d8e96532d7dad06b8ce6f5d89fdc528b138e6e5ec4
-
SSDEEP
6144:pvclB+0dwP5852OjOoDXX5Caq3LoDXX5Caq3:YdwP58yeHjOeHj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7107aed7b751ae806b7a17fc671786392761f515e95d35c1b5fd0d506b75a63
Files
-
b7107aed7b751ae806b7a17fc671786392761f515e95d35c1b5fd0d506b75a63.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 194KB - Virtual size: 193KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ