H:\vfs\ASRExplorer2\AutosarExplorer\obj\x64\Release\AutosarExplorer.pdb
Static task
static1
Behavioral task
behavioral1
Sample
6d86a0a8053f1ccb37a550a70248f4d68ca8257c0f611e852d3264fce26e9fe6.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
6d86a0a8053f1ccb37a550a70248f4d68ca8257c0f611e852d3264fce26e9fe6.exe
Resource
win10v2004-20240508-en
General
-
Target
6d86a0a8053f1ccb37a550a70248f4d68ca8257c0f611e852d3264fce26e9fe6
-
Size
8.9MB
-
MD5
67c7732231aecca1f39b1e513633fbd7
-
SHA1
eea9742b2bd4e362268b6a7dda277bed30d43d21
-
SHA256
6d86a0a8053f1ccb37a550a70248f4d68ca8257c0f611e852d3264fce26e9fe6
-
SHA512
96dbcc5350876fce15b600a664723f1b3e82e076f3322913f5538755afe6e65d43479a074e784b02891e0f7bcf490b5e380596f601597ff88feb77c64a55b698
-
SSDEEP
98304:/9Ez+ZMvOfto3/oxhKBfDGaU1HtwpuFSFo7JaOebGL+iWZV6FtbeC2/2yFGq5B7m:/9g+ty/uK0PGuFSOE2+bqp2/zFbBiq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6d86a0a8053f1ccb37a550a70248f4d68ca8257c0f611e852d3264fce26e9fe6
Files
-
6d86a0a8053f1ccb37a550a70248f4d68ca8257c0f611e852d3264fce26e9fe6.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 7.3MB - Virtual size: 7.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wibu Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ