C:\Users\BQM-Phuc\Desktop\New folder (4)\New folder\WindowsFormsApp1\WindowsFormsApp1\obj\Release\WindowsFormsApp1.pdb
Static task
static1
Behavioral task
behavioral1
Sample
19e0a12fc4576baf2359a3caf17dc254ad479c71d25e93ea22713794a25c993b.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
19e0a12fc4576baf2359a3caf17dc254ad479c71d25e93ea22713794a25c993b.exe
Resource
win10v2004-20240226-en
General
-
Target
19e0a12fc4576baf2359a3caf17dc254ad479c71d25e93ea22713794a25c993b
-
Size
10KB
-
MD5
dce438b9ec46d2ee5719fffd5aacbdbe
-
SHA1
69e08b9ce95215561fa300476ed07df412e34d4d
-
SHA256
19e0a12fc4576baf2359a3caf17dc254ad479c71d25e93ea22713794a25c993b
-
SHA512
b25025dbd870f4b23d8a7b8fdf6393d37fa44ab688f847a10a11c1d38128f08a8f7db4401c2103554e16f50d4881d35a1a18225a3a9f09751b94641426a080c0
-
SSDEEP
192:wtmikXERLjbqZ+L81FOsqLKLo6pJV8P5yCrjIt8stYcFwVc03KY:wtmik0RLjbbL8TOsqLKLo6HVQjrjItpl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19e0a12fc4576baf2359a3caf17dc254ad479c71d25e93ea22713794a25c993b
Files
-
19e0a12fc4576baf2359a3caf17dc254ad479c71d25e93ea22713794a25c993b.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ