WxSq.pdb
Static task
static1
Behavioral task
behavioral1
Sample
47d706ae59ad625e490bcd6b00b08beb98d70b82b641ded9d8784445e3ca6624.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
47d706ae59ad625e490bcd6b00b08beb98d70b82b641ded9d8784445e3ca6624.exe
Resource
win10v2004-20240426-en
General
-
Target
47d706ae59ad625e490bcd6b00b08beb98d70b82b641ded9d8784445e3ca6624
-
Size
696KB
-
MD5
62929ece1afcdcb73384fe57b7da2ac2
-
SHA1
f9e3cf54896652096e43186087a492d0173010e3
-
SHA256
47d706ae59ad625e490bcd6b00b08beb98d70b82b641ded9d8784445e3ca6624
-
SHA512
d3934b8aa516eecd190596bd1082547d18b1c1aa399354cbc6587d0c6094d3d9ffc10f8f2be21215478e54b1a262ecdfee46967c6439a28d04c7f4d7247e7fac
-
SSDEEP
12288:GOu2iN3skSKSIwjP7gxO2MGytqa/uiTRCryfdJxnAQmcFR58rzIuYAZLR2SteLIh:GJ19JSNIg0jMOa/ucRCr8J6cFR58/Igp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47d706ae59ad625e490bcd6b00b08beb98d70b82b641ded9d8784445e3ca6624
Files
-
47d706ae59ad625e490bcd6b00b08beb98d70b82b641ded9d8784445e3ca6624.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 693KB - Virtual size: 692KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ