C:\CBuilder4\Projects\X-Charge\XCharge8.1.1SP8\SDK\Tools\TransactionBuilder\TransactionBuilder\obj\Debug\TransactionBuilder.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c519b75be30e0b80e1661dcc37646b6aca701846fa45a804300624c6da9ae34b.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c519b75be30e0b80e1661dcc37646b6aca701846fa45a804300624c6da9ae34b.exe
Resource
win10v2004-20240704-en
General
-
Target
c519b75be30e0b80e1661dcc37646b6aca701846fa45a804300624c6da9ae34b
-
Size
682KB
-
MD5
d4f092a4302609293c72d65144edd931
-
SHA1
6ab68797d37416f022d09e1b99ec4d36d54825ed
-
SHA256
c519b75be30e0b80e1661dcc37646b6aca701846fa45a804300624c6da9ae34b
-
SHA512
568ecc00269657f7f1a5ccad6a5a2b4905ce7670a90ce77f94c190289d318bb217ffd96204d0846907088fa12b06c3cc4745b0150fdb7bf19c28f9174dcc8d12
-
SSDEEP
6144:NnvAvbIQFCKAkPt/vXIkhF0CIQFdotQCOIQFjZ8guIpQ:JQbdH/Pt4yF0CddoiCOdjZat
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c519b75be30e0b80e1661dcc37646b6aca701846fa45a804300624c6da9ae34b
Files
-
c519b75be30e0b80e1661dcc37646b6aca701846fa45a804300624c6da9ae34b.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 591KB - Virtual size: 590KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ