C:\UsrData\ambo\SRC\VC#2010\TranPTS\TranPTS\obj\x86\Release\TranPTS.pdb
Static task
static1
Behavioral task
behavioral1
Sample
355d70a274e0d3c93000ed488001c4a7c96af6da60630ee0cf0ba73c7edcf371.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
355d70a274e0d3c93000ed488001c4a7c96af6da60630ee0cf0ba73c7edcf371.exe
Resource
win10v2004-20240226-en
General
-
Target
355d70a274e0d3c93000ed488001c4a7c96af6da60630ee0cf0ba73c7edcf371
-
Size
65KB
-
MD5
ff6eaa2d895bc935642337b8235660a5
-
SHA1
9cb211288c905426dfd98091a48aa321e7fa948a
-
SHA256
355d70a274e0d3c93000ed488001c4a7c96af6da60630ee0cf0ba73c7edcf371
-
SHA512
8fb87f29c7e7c0346f0de1afe604b0c9ea436a24f2db86d38e42702d2f03134c6a13045047e15a21c8bb6c811663fb788eeb46e943c4726a9b2c8d3dab4c8998
-
SSDEEP
1536:5pfzw4pjZO5xq63xLJOi6Qom/wWb/I0e0eEkjoMQ1Yn:3fcsudom9e0IoMQ1Yn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 355d70a274e0d3c93000ed488001c4a7c96af6da60630ee0cf0ba73c7edcf371
Files
-
355d70a274e0d3c93000ed488001c4a7c96af6da60630ee0cf0ba73c7edcf371.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ