applaunch.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ee871131baec15711f0e624d6e90c8552ffcd026562f7640ddfdd38716c3195f.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ee871131baec15711f0e624d6e90c8552ffcd026562f7640ddfdd38716c3195f.exe
Resource
win10v2004-20240426-en
General
-
Target
ee871131baec15711f0e624d6e90c8552ffcd026562f7640ddfdd38716c3195f
-
Size
3.7MB
-
MD5
cd71d7c828f99889036c05f857b6606d
-
SHA1
bf8e28f9e88d805b2adacc2ad91f244f6fb1a0a7
-
SHA256
ee871131baec15711f0e624d6e90c8552ffcd026562f7640ddfdd38716c3195f
-
SHA512
e7fd8f1ad7132ece2f4d3f8f10afd81035d3c63817e403d57e1693eb0f8730057cc63d093027ed6ba0d752f1b18601b8bcb52e7a907a5928f3a076fc3c233400
-
SSDEEP
49152:8/dvDllKOyCPOoB4OyCPOlmMrm1RF4cpHqTQ2RNTUh:KvDllZPOy3POlmMrm1RF4Zwh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ee871131baec15711f0e624d6e90c8552ffcd026562f7640ddfdd38716c3195f
Files
-
ee871131baec15711f0e624d6e90c8552ffcd026562f7640ddfdd38716c3195f.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ