D:\VisualStudio\VERplaySchulung\VERplaySchulung\obj\x86\Release\VERplaySchulung.pdb
Static task
static1
Behavioral task
behavioral1
Sample
dafe4b9a9ef357476508a8015b55e4fa1e4e55a2953ab695d40e3fa3c9617e4c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
dafe4b9a9ef357476508a8015b55e4fa1e4e55a2953ab695d40e3fa3c9617e4c.exe
Resource
win10v2004-20240508-en
General
-
Target
dafe4b9a9ef357476508a8015b55e4fa1e4e55a2953ab695d40e3fa3c9617e4c
-
Size
190KB
-
MD5
82fa383c1cd5e41021262512be7b5122
-
SHA1
ffc7052cfda254d293b76fc6bf4597cc663800e2
-
SHA256
dafe4b9a9ef357476508a8015b55e4fa1e4e55a2953ab695d40e3fa3c9617e4c
-
SHA512
3b1131150184fbdb773c12529cff4876a1bd54f00b35d2e412d53fd5cb57c6488ab73dd3b1613346b079a377e74dca4b589fc8a5b90e7c66a33eb8da084188f4
-
SSDEEP
3072:RtPoYZSSSSSS0UOelREt2QJ+Sf5S358h1C9xNzTPoYZSSSSSS0UOelREt2Qh+Sq:RtMUOezElASxSJT93MUOezElYSq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dafe4b9a9ef357476508a8015b55e4fa1e4e55a2953ab695d40e3fa3c9617e4c
Files
-
dafe4b9a9ef357476508a8015b55e4fa1e4e55a2953ab695d40e3fa3c9617e4c.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ