C:\Users\user\source\repos\Runner\Runner\obj\Release\FCK.pdb
Static task
static1
Behavioral task
behavioral1
Sample
6d96dfafcafcdbbe421dfd600b8e1941e3ff07cdd8a4249d5f794efd013f883c.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
6d96dfafcafcdbbe421dfd600b8e1941e3ff07cdd8a4249d5f794efd013f883c.exe
Resource
win10v2004-20240508-en
General
-
Target
6d96dfafcafcdbbe421dfd600b8e1941e3ff07cdd8a4249d5f794efd013f883c.exe
-
Size
6KB
-
MD5
96e91b10a354a5224465b594b88b52a4
-
SHA1
8287272145445f5b615c98729f117beac8b566f4
-
SHA256
6d96dfafcafcdbbe421dfd600b8e1941e3ff07cdd8a4249d5f794efd013f883c
-
SHA512
14295fae188bb91f3ba9ebd6e95580c3db0065325fccc159a57bc943a511ac0dbdca3264f34be022a77c864e19a93a2fec1238394a3bbe6110da7a4c880114c1
-
SSDEEP
96:KuO4fcHKB+L3BS1lMcLeCzjwv0FAPWRzc+Bfodj956GgMAH7HkahcBUFT:KlhcLeCz0vSP9cCfocZkahFT
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6d96dfafcafcdbbe421dfd600b8e1941e3ff07cdd8a4249d5f794efd013f883c.exe
Files
-
6d96dfafcafcdbbe421dfd600b8e1941e3ff07cdd8a4249d5f794efd013f883c.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 900B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ