C:\Users\Ashtin\Desktop\WTF\WpfApp1\WpfApp1\obj\x64\Release\WpfApp1.pdb
Static task
static1
Behavioral task
behavioral1
Sample
cd57e4c171d6e8f5ea8b8f824a6a7316.exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
cd57e4c171d6e8f5ea8b8f824a6a7316.exe
Resource
win7-20240508-en
Behavioral task
behavioral3
Sample
cd57e4c171d6e8f5ea8b8f824a6a7316.exe
Resource
win10-20240404-en
Behavioral task
behavioral4
Sample
cd57e4c171d6e8f5ea8b8f824a6a7316.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
cd57e4c171d6e8f5ea8b8f824a6a7316.exe
Resource
win11-20240426-en
General
-
Target
cd57e4c171d6e8f5ea8b8f824a6a7316.exe
-
Size
85KB
-
MD5
15cdabcecc4ae0ec3253b1625156b0a7
-
SHA1
fa1b2c6a2be53578ef278706cdee6f725e00b003
-
SHA256
6dbcc562d627628e45187afbd2421be88797e20e36910393a883e361973da553
-
SHA512
c9a1740bf5fed7cbc6d91ab92222b178fe4a8ab2d75dd8f18d827046bab88d7632b0751e953e77e29aaf9a9bf390697e94f23e172cfe034a4263bcf7c7149106
-
SSDEEP
1536:O3pQ59I3BbbHVlnOXrPBdfeISRAOl801AbcsqD95wSxdRf0:wQHMbb1lnOXrPXe7Yhq5Zs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd57e4c171d6e8f5ea8b8f824a6a7316.exe
Files
-
cd57e4c171d6e8f5ea8b8f824a6a7316.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ