c:\Users\ryan_mc\Documents\Visual Studio 2013\Projects\EnableWerFullDumps\EnableWerFullDumps\obj\Debug\EnableWerFullDumps.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a77c0e30b796f90fdde0382858f1e89ec3133c44c44b0f0a9bfa356b731a4b84.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a77c0e30b796f90fdde0382858f1e89ec3133c44c44b0f0a9bfa356b731a4b84.exe
Resource
win10v2004-20240611-en
General
-
Target
a77c0e30b796f90fdde0382858f1e89ec3133c44c44b0f0a9bfa356b731a4b84
-
Size
5KB
-
MD5
42dec1516c8f65c8be72fd76095223ef
-
SHA1
bff104bf3171d75ad17a844331f2ae8e80a195d0
-
SHA256
a77c0e30b796f90fdde0382858f1e89ec3133c44c44b0f0a9bfa356b731a4b84
-
SHA512
a153a79ae0c1030d7b086148468e733ea527173d658b3690110caf55d4dd2f448c0a1dc66e3eba5e69d2bff6c79280b519d6cd9395d50c2b408c7baf8249fc93
-
SSDEEP
48:634Roe2eITfZPIF/UGUlsFeYI8GNC85WuJPdrZnrNFEg3wtr0aDj6gX8oM9gJ8k9:QaoVjTfKUGUlyYB/xaDj6QF4yUI6zNt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a77c0e30b796f90fdde0382858f1e89ec3133c44c44b0f0a9bfa356b731a4b84
Files
-
a77c0e30b796f90fdde0382858f1e89ec3133c44c44b0f0a9bfa356b731a4b84.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ