C:\Users\Administrator\Desktop\Dorker\WPCracker-master\WPCraker\obj\x86\Debug\WPBE1877.pdb
Static task
static1
Behavioral task
behavioral1
Sample
WPBE1877.exe
Resource
win10-20240404-en
General
-
Target
WPBE1877.exe
-
Size
391KB
-
MD5
5ef71c3c2cd1e26cb5eaefb411ab6a64
-
SHA1
5da81881a11477e9dd85c0ca4095000a82252e30
-
SHA256
19ca48e35f12b609b997c68999ee6d6ab1f925edb4d74781b9c93c5c019c5068
-
SHA512
726afaa8b0680d8348a4ae7137a844c2202d9dedfe30d834742e496d56801eb4833f524fa4d944ce4d7a55dad7c67d3a608f3ae23ba3c78c400d723ce5e21edc
-
SSDEEP
3072:hdQqgArMqkeQY192WzxR9NFPoVAWSkfGScl51N9UZZWFrAWSkfGScl51N9UZ3Vpy:nMq319/0FmS+51IbWNFmS+51IhV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource WPBE1877.exe
Files
-
WPBE1877.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 246KB - Virtual size: 246KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ