gpZh.pdb
Static task
static1
Behavioral task
behavioral1
Sample
78588bb6ad9171d8df7e61ca7f2f8eba693f6054526991df7a7b491f01710834.exe
Resource
win7-20240221-en
General
-
Target
97738521d387d0a4657225d342eb1b1a8cee53cd002b6d871edb7d6abc804371
-
Size
648KB
-
MD5
ae88014c352b2a884223400ff53cdc36
-
SHA1
0c7229fa0f90a88df02cfb4de9ca076d48f3d360
-
SHA256
97738521d387d0a4657225d342eb1b1a8cee53cd002b6d871edb7d6abc804371
-
SHA512
29d81eaef7634bb832c146b424d42d26501ab7be2dc7748545bc9d8ce4914443e8b2ee7478e70ecf8d04f611f0c2bc8ca6bc3969236b85b3eba1b5d0a1670c54
-
SSDEEP
12288:idaOST1EKEcab6UKqyN0OEKlj3vkSeZ7HM5rowaN0mBsKVnoXsZLU:iy1c9XEk4/aZo5roXbB0sZLU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/78588bb6ad9171d8df7e61ca7f2f8eba693f6054526991df7a7b491f01710834.exe
Files
-
97738521d387d0a4657225d342eb1b1a8cee53cd002b6d871edb7d6abc804371.zip
Password: infected
-
78588bb6ad9171d8df7e61ca7f2f8eba693f6054526991df7a7b491f01710834.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 917KB - Virtual size: 916KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ