c:\Documents and Settings\USER\My Documents\My Dropbox\program\kakoroku128-3\Release\kakorokuRecorder.pdb
Static task
static1
Behavioral task
behavioral1
Sample
7c59b772fede35238430c1dddf9414cd20f49a952ba20cb0d82c12cd7277d714.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7c59b772fede35238430c1dddf9414cd20f49a952ba20cb0d82c12cd7277d714.exe
Resource
win10v2004-20240508-en
General
-
Target
7c59b772fede35238430c1dddf9414cd20f49a952ba20cb0d82c12cd7277d714
-
Size
145KB
-
MD5
b386f86a7598b4fcd0777044edbc831a
-
SHA1
3ada1023f46f67b34965b6dea76ffd312461c498
-
SHA256
7c59b772fede35238430c1dddf9414cd20f49a952ba20cb0d82c12cd7277d714
-
SHA512
4d790a7b44204ee5db0486f26725ada3157e209df67b816c83d6ee0ed9dc39b846d3bf4c310376fb9e26f2994534842cd7c33c08de5187de41169fc9e064aff4
-
SSDEEP
3072:Yec6c4E6bN8f2IDQgL9rMFnwIZPTn4N2b4HuwIA0IEoVKQ+7Nheud3BRLEb64g0M:w4lp8f22ynwIZPTn4N2b4HuwIA0IEoV1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7c59b772fede35238430c1dddf9414cd20f49a952ba20cb0d82c12cd7277d714
Files
-
7c59b772fede35238430c1dddf9414cd20f49a952ba20cb0d82c12cd7277d714.exe windows:5 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ