D:\devops\workspace\p-4721b75f0ad04ebda8eabdc73607083b\Output\PdbFinal\PluginContainer.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4d40d7d8ea86735e675059080bea541f694ab69a77d7fed2fa93a05b35b3a040.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4d40d7d8ea86735e675059080bea541f694ab69a77d7fed2fa93a05b35b3a040.exe
Resource
win10v2004-20240508-en
General
-
Target
4d40d7d8ea86735e675059080bea541f694ab69a77d7fed2fa93a05b35b3a040
-
Size
239KB
-
MD5
5795b70f9ae4997cec8d139521de18d3
-
SHA1
e30a7bed2769ac08cba3a9b67889adb9b2d29406
-
SHA256
4d40d7d8ea86735e675059080bea541f694ab69a77d7fed2fa93a05b35b3a040
-
SHA512
c8f1da78fabfd8e8a5d86761c9d176429de4ae74e8552593e5e88dcdb79591b0249a1bc1d0a7d8534007a2a3936164d8889048f3f3499a3a5b8e0d379485b36a
-
SSDEEP
6144:8R7TQ5zx0XZ00bR1xKcaLQ8f+wUfRYYKodk:+7Mqp00PaQbVJkodk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d40d7d8ea86735e675059080bea541f694ab69a77d7fed2fa93a05b35b3a040
Files
-
4d40d7d8ea86735e675059080bea541f694ab69a77d7fed2fa93a05b35b3a040.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.wtq Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE