C:\Users\Victor\Desktop\исходник\Passcodes\Passcodes\obj\Release\Passcodes.pdb
Static task
static1
Behavioral task
behavioral1
Sample
818312adc9e44b1c8b4901c505a09322e4ef79d5b17e0d339821859596506804.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
818312adc9e44b1c8b4901c505a09322e4ef79d5b17e0d339821859596506804.exe
Resource
win10v2004-20240508-en
General
-
Target
818312adc9e44b1c8b4901c505a09322e4ef79d5b17e0d339821859596506804
-
Size
852KB
-
MD5
4ba8d03c4cbe39b6f35f5b852e57985f
-
SHA1
ac7ade68c781b8f4b1070bd88405990d88598fca
-
SHA256
818312adc9e44b1c8b4901c505a09322e4ef79d5b17e0d339821859596506804
-
SHA512
4d51dc4fd36a5cd2afa75acf0b378d9a253708638b3bd68a96362c14af8bfb43582f64fe619fc4467f4d3fc59bd8bc7a0845f2f592f409c5449f0cd6101e6b00
-
SSDEEP
6144:6Df7D91b0B5CO6bfdg5ONCxB0WEET+N6+poNH95o0UuO6bfdg5ONCxB0WEET+N6B:e1p0QW8NCD9E23qWW8NCD9E2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 818312adc9e44b1c8b4901c505a09322e4ef79d5b17e0d339821859596506804
Files
-
818312adc9e44b1c8b4901c505a09322e4ef79d5b17e0d339821859596506804.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 488KB - Virtual size: 487KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ