C:\RaBo\ConnectVision\SMS.Net\AcceleratorDataLogServiceHost\obj\Debug\AcceleratorDataLogServiceHost.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c88735094da634e27c333096c36296e762d8b4a6e5f1b109b89f229b57013a1e.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
c88735094da634e27c333096c36296e762d8b4a6e5f1b109b89f229b57013a1e.exe
Resource
win10v2004-20240611-en
General
-
Target
c88735094da634e27c333096c36296e762d8b4a6e5f1b109b89f229b57013a1e
-
Size
17KB
-
MD5
883e1ff71afe3ff6b9b7e3f90d4f4772
-
SHA1
7e12bf2ed8791d691843aed0d7a7af6de34a9108
-
SHA256
c88735094da634e27c333096c36296e762d8b4a6e5f1b109b89f229b57013a1e
-
SHA512
0973087af8e5be2f4292ad7e0d3fd85653e501fdd85c277eacce546423a9ae6d825fc61b8168562b61b030a482b63a9421ee2b7befdcb774b509d6a721c3a930
-
SSDEEP
384:bp5M5yfr4Zlz4hHe9aFcwaaz+3RAwNVRjjYR:b45yDO6hHeycBlRjjA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c88735094da634e27c333096c36296e762d8b4a6e5f1b109b89f229b57013a1e
Files
-
c88735094da634e27c333096c36296e762d8b4a6e5f1b109b89f229b57013a1e.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 156B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ