C:\Users\xxx\Desktop\WriterPro\Writer_Pro\WriterPro\obj\x86\Release\WriterPro.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4f158429c477ff9814165f1544a6fc7ea0ecfd77539f52da9a23ce7bdc15ce2c.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
4f158429c477ff9814165f1544a6fc7ea0ecfd77539f52da9a23ce7bdc15ce2c.exe
Resource
win10v2004-20240611-en
General
-
Target
4f158429c477ff9814165f1544a6fc7ea0ecfd77539f52da9a23ce7bdc15ce2c
-
Size
1.1MB
-
MD5
a2e58d9b8ecb9a53fb98fdea4aa4f97f
-
SHA1
f83d67255c64d5cd66188b07217fde0d8bae1300
-
SHA256
4f158429c477ff9814165f1544a6fc7ea0ecfd77539f52da9a23ce7bdc15ce2c
-
SHA512
b818f01dcdbf03425441989667fad51e532d47110139f51b4c49d01ed0ead13a807acee9d082984d094bbf8f149aaf677935c03798af72965ed0c6cbbff0dc5d
-
SSDEEP
12288:p+/Je+n9rho5JrUWrFAE+cLz+G8R0CLdgsGohh:0Jdra5hZrFF5LR8R0Qdk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f158429c477ff9814165f1544a6fc7ea0ecfd77539f52da9a23ce7bdc15ce2c
Files
-
4f158429c477ff9814165f1544a6fc7ea0ecfd77539f52da9a23ce7bdc15ce2c.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 905KB - Virtual size: 905KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 185KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ