C:\Users\Ashtin\Desktop\WTF\WpfApp1\WpfApp1\obj\x64\Release\WpfApp1.pdb
Static task
static1
General
-
Target
XcHvYYrNa.exe
-
Size
85KB
-
MD5
5e1bc1ad542dc2295d546d25142d9629
-
SHA1
dd697d1faceee724b5b6ae746116e228fe202d98
-
SHA256
9cc1a5b9fd49158f5cca4b28475a518cb60330e0cad98539d2a56d9930bdf9f9
-
SHA512
dc9dbecec37e47dd756cd00517f1bfe5b27832bd43c77f365defc649922cb7967eb7e5de76d79478b6ebfd99a1cc2e7e6b5119a05a42fd51a1c091b6f00f2456
-
SSDEEP
1536:3TF85Sd9I3BbbHVlnOXrPBdfeISxAOl801AbcsqD95wSxdRfb:3TF85SjMbb1lnOXrPXe74hq5Zz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource XcHvYYrNa.exe
Files
-
XcHvYYrNa.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ