G:\Alexis\Documents\Visual Studio 2010\Projects\VirtualTimeMachine\VirtualTimeMachine\obj\x86\Release\VirtualTimeMachine.pdb
Static task
static1
General
-
Target
VirtualTimeMachine.exe
-
Size
97KB
-
MD5
5f344a7a5e3fb969c314c401cab9ef9f
-
SHA1
e863c9459b40a695ce38ec44e8a74d77878433f7
-
SHA256
48a285decd4f48a72fd6005226c5c35e15030e9ad52504ba1493d4061fb79f0b
-
SHA512
687febdb797c82e9484843c4ddbfed2dc81793221ca16758c3481b5d1c9334f95ff2c0a5728da70cb6d3ee09a9a05da864758b3b1c67c571a36ac4bd80da583f
-
SSDEEP
1536:jsUtqDOjfdMqFjo3bSBBPW6mdZd1UZTDy5jyeqEDs:o4SqBoei62Zd1ATOl8EI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirtualTimeMachine.exe
Files
-
VirtualTimeMachine.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 95KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ