C:\Users\111\Desktop\Meatspin\Meatspin\obj\Debug\govno.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Govno_iz_shopy.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Govno_iz_shopy.exe
Resource
win11-20240419-en
General
-
Target
Govno_iz_shopy.exe
-
Size
3.4MB
-
MD5
8fdfe45f0be748222750dbe5860f3f48
-
SHA1
41cee95476ba1a5d53e33d84312fcfdc5837f8f7
-
SHA256
6a8ba5558325f0b90a8247cfc68ca7df7d9b5fa63ac90a5f304dc40bec9390e9
-
SHA512
4b3bacfd33f707303511fd76015db43be863d8b5d03fbf5c3a1f9773791f52f410b76c0539b5f3504b5e691a458f6bb6a6b74f217547ef03554ab76558f01228
-
SSDEEP
49152:N/OrUhRGHpVJIEpR8sZmyin1VsKVBHBxu94Pl8z63bRLSEwB0ohdlEBzWYjjGo:XaV5pHml1VnHPC4d8EbRLFdMdqBzfj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Govno_iz_shopy.exe
Files
-
Govno_iz_shopy.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ