C:\Users\Brwa\Desktop\Violtu\Violtu\obj\Debug\Violtu.pdb
Static task
static1
Behavioral task
behavioral1
Sample
6a455e9b962aa68ed3b1261574b2f341137109b103c01f7efc53946ffd8eeefe.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
6a455e9b962aa68ed3b1261574b2f341137109b103c01f7efc53946ffd8eeefe.exe
Resource
win10v2004-20240508-en
General
-
Target
6a455e9b962aa68ed3b1261574b2f341137109b103c01f7efc53946ffd8eeefe.exe
-
Size
70KB
-
MD5
3db6a404d2c91a867cefab626a3485b0
-
SHA1
eb78e47188766d5f6241e33ccf0ffe710804fbcb
-
SHA256
6a455e9b962aa68ed3b1261574b2f341137109b103c01f7efc53946ffd8eeefe
-
SHA512
a44fd184a718bad869c891b9764a6e63f69e29863b5ebdeca13deee74997351daa2f604e784591b9ae7ccee58bb012db3e3d15c73ea07640718c612ecf43ce86
-
SSDEEP
768:mvEq5Peo/5oaZr09e2pEkol/d3eJG53G73my86iCgkoeU5rmDr5Vr:mZ5Peoxo1LC3eJG53G73mxdvdekrmph
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a455e9b962aa68ed3b1261574b2f341137109b103c01f7efc53946ffd8eeefe.exe
Files
-
6a455e9b962aa68ed3b1261574b2f341137109b103c01f7efc53946ffd8eeefe.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ