C:\Users\ahint\source\repos\dusk\UItest\obj\Debug\duskclicker.pdb
Static task
static1
Behavioral task
behavioral1
Sample
duskclicker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
duskclicker.exe
Resource
win10v2004-20240508-en
General
-
Target
duskclicker.exe
-
Size
3.5MB
-
MD5
fe80aa98381fee41e00ff555e7f7722e
-
SHA1
b0dc5c527b3e1463f976af43d05d4e22f759e4d6
-
SHA256
65d3f0d5d7a3fcb357ddbcf8a02bec7defaf013703ca283c030048e304d45321
-
SHA512
06c6b9338040bba1ee9b8a007f6ad8119d94bbc8dd00cae17440409c7573528d9f3289f3f8f94d4f5a43ff750e4dc9ba7f2682d2d38dfaa81d0d9526120bb3fb
-
SSDEEP
49152:J+qNSNPw+W7SC382olUw/DIDiGFbwr8GQMaUw9uRzCm0FfeCCxNJ/MzV47Zb/9BE:JjNdJwlUw/civJQMtqyt0FmvH/eV4d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource duskclicker.exe
Files
-
duskclicker.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ