aVtL.pdb
Static task
static1
Behavioral task
behavioral1
Sample
01b0b83e5290c4df9b9098337d80c54e53e5d5d09a5cc2d3f8094b6fd10cbd52.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
01b0b83e5290c4df9b9098337d80c54e53e5d5d09a5cc2d3f8094b6fd10cbd52.exe
Resource
win10v2004-20240426-en
General
-
Target
01b0b83e5290c4df9b9098337d80c54e53e5d5d09a5cc2d3f8094b6fd10cbd52
-
Size
680KB
-
MD5
a09d65647608116a142617b2f5d93c96
-
SHA1
cdd3b3765b04cb4838508b93b24a9150dd846239
-
SHA256
01b0b83e5290c4df9b9098337d80c54e53e5d5d09a5cc2d3f8094b6fd10cbd52
-
SHA512
b8843bc3903e5a3db129f12816a187a4cc33ab148b96a945f9715987a470b4511967c4347028ff9c993cd09acff56e479c8682ebb985d0d5fc1f592cedff0e45
-
SSDEEP
12288:BDR+zN7gHCN1/dsWVV2K8B4ge8Ks9pRdRG9y6sBH3MigxsB0xc5itDl3VYYI0n1r:DIN7gq1uaV2K9f8KMRdRuOH3MPWjidlZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01b0b83e5290c4df9b9098337d80c54e53e5d5d09a5cc2d3f8094b6fd10cbd52
Files
-
01b0b83e5290c4df9b9098337d80c54e53e5d5d09a5cc2d3f8094b6fd10cbd52.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 678KB - Virtual size: 677KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ