ivyb.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3d42be817eb0a150a642713d3234847e943dce60e98a3e9722d9fa01d5c880c4.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3d42be817eb0a150a642713d3234847e943dce60e98a3e9722d9fa01d5c880c4.exe
Resource
win10v2004-20240426-en
General
-
Target
3d42be817eb0a150a642713d3234847e943dce60e98a3e9722d9fa01d5c880c4.exe
-
Size
610KB
-
MD5
d8daf5dd7816250aa778a6f83f073d69
-
SHA1
d973e49364a31c2fa86479b17aaafd80815f49a8
-
SHA256
3d42be817eb0a150a642713d3234847e943dce60e98a3e9722d9fa01d5c880c4
-
SHA512
0a116ed046e19a8295bdc23e9d9bfd0b6a368cf5b0da4a1dc5b4f36cb2a3c573e8f2645746ae838c818b3110fbe43e23825ac5a341dbe91fb77216db8754d280
-
SSDEEP
12288:WX0pei36RjV6aCKe11pI/zObuJV5DSUG3mfj0rkG/FCRuz:Wkpp363D01eRj5DSUIm7qHP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d42be817eb0a150a642713d3234847e943dce60e98a3e9722d9fa01d5c880c4.exe
Files
-
3d42be817eb0a150a642713d3234847e943dce60e98a3e9722d9fa01d5c880c4.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 607KB - Virtual size: 607KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ