p:\Target\x86\ship\setuptools\x-none\Flattener.pdb
Static task
static1
Behavioral task
behavioral1
Sample
01156b42d3be75833cf4ea58cc3ae90d0de6d0b703a2859d69c242422f7e110a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
01156b42d3be75833cf4ea58cc3ae90d0de6d0b703a2859d69c242422f7e110a.exe
Resource
win10v2004-20240426-en
General
-
Target
01156b42d3be75833cf4ea58cc3ae90d0de6d0b703a2859d69c242422f7e110a
-
Size
2.3MB
-
MD5
d8eb50508c861423ae3a28f7c124b8c8
-
SHA1
9d5029502af782b46840048fcecae0ef28a353ac
-
SHA256
01156b42d3be75833cf4ea58cc3ae90d0de6d0b703a2859d69c242422f7e110a
-
SHA512
151a494495b63f9dcf7ec5a83d9621c5ac77d5dd6fbe1b3d57b11ebee0dd31a71c5089eb81b6b585c22cb5a8c3507c7552b46939dc261c42f433d99f7a8dc63a
-
SSDEEP
24576:fcuzKPgssStPUvg/c+lPYTXVav9MkqSI8LUlFl5FppO:fhKPgssSt2g/1v9MxcY/pO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01156b42d3be75833cf4ea58cc3ae90d0de6d0b703a2859d69c242422f7e110a
Files
-
01156b42d3be75833cf4ea58cc3ae90d0de6d0b703a2859d69c242422f7e110a.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ