E:\Git\SZWMSQ8\pda\PDADevice\obj\Debug\PDADevice.pdb
Static task
static1
Behavioral task
behavioral1
Sample
PDADevice.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
PDADevice.exe
Resource
win10v2004-20240508-en
General
-
Target
PDADevice.exe
-
Size
336KB
-
MD5
f7d6de24044dfc3a023f19151bf68edd
-
SHA1
c2f308c106fb6243b88b153d27435d6dbe67a141
-
SHA256
d076739410b8e385db25590398f702e20cd174ef23175ab455844b6ab3481539
-
SHA512
9daf2ab19a7da12a4a4b497916236acc4a2f00ec190da7f388b1b2ee61a02360f8b57fcf78dac4af002adc3b67c0c76227909032fb15beedc292ba8a093adfe8
-
SSDEEP
6144:Ya7HS3yFgGFmhsWho0hsWRhsWy/zW+hsW3u:YVyFgDm0JK/FP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PDADevice.exe
Files
-
PDADevice.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 330KB - Virtual size: 329KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ