SecE.pdb
Static task
static1
Behavioral task
behavioral1
Sample
GOPJf5klcCGgRIu.exe
Resource
win7-20240221-en
General
-
Target
GOPJf5klcCGgRIu.exe
-
Size
729KB
-
MD5
e9e2af541c46da4df07b6023a3b38e3e
-
SHA1
c1845f610abd69ac9284a2c17e538a175094d383
-
SHA256
ec96012bde829c941a7b70ada8d3b859a9a0c7981adba9fdbd3085263eddb2aa
-
SHA512
111c57c244295b4df49efc05825f903bfd28c040a2f8f5dbefdfca507a2f32a9d1f8b7a35f8a392ab7ceffda17c717db424e25c4bd1f7258aeef7c1c81cd1b2f
-
SSDEEP
12288:P99glhxbCawLp1IpQvW7NMHW0xJZL7myZ54OGdPUEwUIAmzOWYZR9O2G6Cx:PGwV1Bmy20xP7p+GEwxAmz6c2ux
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource GOPJf5klcCGgRIu.exe
Files
-
GOPJf5klcCGgRIu.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 681KB - Virtual size: 680KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ