Appmain_surprise.pdb
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20240221-en
General
-
Target
file.exe
-
Size
4.0MB
-
MD5
04976c9e6aa8481402075c917916a83e
-
SHA1
4079a6cca10bbdaccd13401f30a1a95276db7eb9
-
SHA256
b26b1074a9b97f7f8be564b70f50ee965df6b8773695ba25d72c2638d3c90586
-
SHA512
4ea2b676678d883457e434bbeee3cd3f88f0eb3c80013551459077c064b5f6103dd1b51882cf4c56f52d5369d1c4e00d0f3cd1db006c804fcdb7333292e7402a
-
SSDEEP
49152:u70LoELHB0Bw+PQQEB8Im+XkOAwuzIeIEJgHLXIizBMBaPKVY:uI0ELm/keIECrXId4aY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource file.exe
Files
-
file.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 145KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ