C:\AdvancedHMI\AdvancedHMIBeta363\AdvancedHMI\obj\Debug\AdvancedHMI.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3b4eff78f066e80d9e21d3fc5f6e9c2f4ea260f15c69d6c406d155b8df3a7b88.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3b4eff78f066e80d9e21d3fc5f6e9c2f4ea260f15c69d6c406d155b8df3a7b88.exe
Resource
win10v2004-20240508-en
General
-
Target
3b4eff78f066e80d9e21d3fc5f6e9c2f4ea260f15c69d6c406d155b8df3a7b88
-
Size
216KB
-
MD5
5fcb4abd9171f18ab59d8c80917d625b
-
SHA1
3fb52c621d0ccef322c4996e221c46216aa99d40
-
SHA256
3b4eff78f066e80d9e21d3fc5f6e9c2f4ea260f15c69d6c406d155b8df3a7b88
-
SHA512
d3ba961e212e94bede3914d373fceda1abaa12e5240e11efa865f5f78c3ae1a478740dd1b218e4702b1240bb9a0101ac7a353280f374ddae28c998c3d7cbbf51
-
SSDEEP
3072:djwGO7gRRG9dNMbrwwxOklfEmQ3KK++5stV1yYmKzkiXBj:1o78RGt8rwwxFlfc3Kx+5Y7lzT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b4eff78f066e80d9e21d3fc5f6e9c2f4ea260f15c69d6c406d155b8df3a7b88
Files
-
3b4eff78f066e80d9e21d3fc5f6e9c2f4ea260f15c69d6c406d155b8df3a7b88.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 201KB - Virtual size: 201KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ