C:\Users\stryker summey\source\repos\pcfucker\pcfucker\obj\Debug\pcfucker.pdb
Static task
static1
General
-
Target
WideChatSetup.exe
-
Size
10KB
-
MD5
3bd21fdfc6072c38ad57adadf4d76e21
-
SHA1
b94a67f20fd65e45599c5190b480f29bdd7e3352
-
SHA256
becc7d746e2da0f49c893e5b7f73feab52cbfffcaef80391092b814f349af466
-
SHA512
2e313af3afbf57a2a6115466342cfc7a79665ff8bbee37c1599e80e9f79ec98b4c41ab2e8a4594ce1ce8b7415005fc21b9a2ae786800b03ddffc6f973a63bd0e
-
SSDEEP
96:kQcrV93y0fd9V5myrhb3s2lKXpnRtMEfpCkfWvKVn0CugIfpobSs/ky9kVr/fFEq:+rVBkyaxXyEhXVn0CEhdyWV7tR7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource WideChatSetup.exe
Files
-
WideChatSetup.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ