C:\Users\Administrator\source\repos\ag\ag\obj\Debug\ag.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ag.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ag.exe
Resource
win10v2004-20240704-en
General
-
Target
ag.exe
-
Size
11KB
-
MD5
d58413f610b6aff66206702cb8efbfbc
-
SHA1
43eb7424f70e8c9f29bc7e2cbac34331348ee21d
-
SHA256
0aeced76dd643b3e74492b272cb354575d13cbfb6fa726bbaee46b98f69b3591
-
SHA512
79577ad50f14d1acc06561aafaf8b3b223a06253eff8c198ab320451853c5e1e8e7db830294e8d92a7b4a29bc536752cb81639eacf2f3edea573980e6de8e120
-
SSDEEP
192:x5hSed03eff5fhCKdeX67COFVv1p3mCLJa14aAFtqWQcLYyYu5pGlvsNgefpp7:xnSed03eff5fhCKdeXKCOFVv1ptLY1Ah
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ag.exe
Files
-
ag.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ