C:\Users\Jumper\source\repos\AgA\AgA\obj\Debug\AgA.pdb
Static task
static1
Behavioral task
behavioral1
Sample
AgA.exe
Resource
win7-20231129-en
General
-
Target
AgA.exe
-
Size
31KB
-
MD5
6197fa3e6736ed4b313eba2366eed535
-
SHA1
ee7aa68908e7e1411282a32b5c1ef854842ef1eb
-
SHA256
f903df41dca1b26dc46ae2853e33fc3b50d0759dbd41e12710eb428b38c9d736
-
SHA512
13eaea92ca4f5177e2db0ab5f63d9dd4d099e8e74c86eb1cebe21191dc0c54ed822b60c514c4e187a82aa40d9b5ea3bf406309c0cd106642edbc5134e0607622
-
SSDEEP
384:OfeHXdx3yg89LItprN1pHzRjSlDCmuokwlwAorKNwj3gZaFjnsMMQy7dW4+gLVm1:z3dZAhkzhSlDChaOsMC44hQ88LPCc55
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource AgA.exe
Files
-
AgA.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ