F:\Office\Target\x86\ship\postc2r\x-none\selfcert.pdb
Static task
static1
Behavioral task
behavioral1
Sample
63b262c85c32faa817b2e1aa889bf4f9266d6349d6ed3bc7a13a08d98cc4174e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
63b262c85c32faa817b2e1aa889bf4f9266d6349d6ed3bc7a13a08d98cc4174e.exe
Resource
win10v2004-20240508-en
General
-
Target
63b262c85c32faa817b2e1aa889bf4f9266d6349d6ed3bc7a13a08d98cc4174e
-
Size
4.0MB
-
MD5
950280cb2ed35167549087a0a4c8175e
-
SHA1
c925470ae269a18325b4df1639af3dbdf91cba4a
-
SHA256
63b262c85c32faa817b2e1aa889bf4f9266d6349d6ed3bc7a13a08d98cc4174e
-
SHA512
fa6d7b2c9102713801d488ec917d1d32e14d89c15434cfb3e54042bbe5144d5f3976e41507bc45bcb1d959c0d679deec0147c72d4bc5c28d57f9351b8412cf8d
-
SSDEEP
49152:MmDta44H0g7mM+M6RkMkIM7I067YljqcY/l35DMnCIjtAywHc:MCfM+M6RkMkIM7hH55B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63b262c85c32faa817b2e1aa889bf4f9266d6349d6ed3bc7a13a08d98cc4174e
Files
-
63b262c85c32faa817b2e1aa889bf4f9266d6349d6ed3bc7a13a08d98cc4174e.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 153KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 178KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c2r Size: 512B - Virtual size: 340B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ