App111software_promo.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b32a0ffce29ba355413cda01c14d26c0c806dfad1d82f81de95aca62119bfb03.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
b32a0ffce29ba355413cda01c14d26c0c806dfad1d82f81de95aca62119bfb03.exe
Resource
win10-20240404-en
General
-
Target
b32a0ffce29ba355413cda01c14d26c0c806dfad1d82f81de95aca62119bfb03
-
Size
2.5MB
-
MD5
fffa9f082ea374f080b8b6c0ecd1f783
-
SHA1
ba96219c03ed491d72ad39c012c4a08b99b008a2
-
SHA256
b32a0ffce29ba355413cda01c14d26c0c806dfad1d82f81de95aca62119bfb03
-
SHA512
86268dec5867cfe6472f06d0af3e64bb1a285de125f9ac0f92b715da38c00c2ebe63068cad08c974ff109fc95fafae065a2af606dff1f9c8c40b0405a3dbb0d1
-
SSDEEP
49152:iSv33iMmmNcwUwO7DsYeVHOpf5hBQj4VY4:iSX91OZwOLsS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b32a0ffce29ba355413cda01c14d26c0c806dfad1d82f81de95aca62119bfb03
Files
-
b32a0ffce29ba355413cda01c14d26c0c806dfad1d82f81de95aca62119bfb03.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ