C:\Users\Markus Maal\source\repos\MarkusMaal\BlueScreenSimulatorPlus\obj\Release\Blue screen simulator plus.pdb
Behavioral task
behavioral1
Sample
Blue.screen.simulator.plus.exe
Resource
win7-20240221-en
General
-
Target
Blue.screen.simulator.plus.exe
-
Size
4.2MB
-
MD5
7667e80fbcb3e5b35eb11786f9db7306
-
SHA1
9e1b957b90726e75e705c1039a61bc2d2cc8551f
-
SHA256
72e8c82be402fb8927d02f71dfd90fce6c63e8c89736bdd24281078e9c2ba42a
-
SHA512
a799d90e4590c8de43dcd28dc3e0bc587f4fc2ce66cafecf44faa797a200bafd3bca923c54a43ee09705b6897e5a610d51fec99f86b1f0909c5fee368bf4b00b
-
SSDEEP
98304:gd6dqsk9HqnhqXpqAMhiquqq0/q9JXB9qsk9HqnhqXpqAMhiquqq0/q9JXBTqskf:gd6dqsk9HqnhqXpqAMhiquqq0/q9JXBJ
Malware Config
Signatures
Files
-
Blue.screen.simulator.plus.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ