System.Drawing.Design.pdb
Static task
static1
Behavioral task
behavioral1
Sample
14e5ba3005a0e58fbe5cecfb32eded60N.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
14e5ba3005a0e58fbe5cecfb32eded60N.dll
Resource
win10v2004-20240704-en
General
-
Target
14e5ba3005a0e58fbe5cecfb32eded60N.exe
-
Size
224KB
-
MD5
14e5ba3005a0e58fbe5cecfb32eded60
-
SHA1
1ac349243607c7f422886d838ddaad53d1cb1eac
-
SHA256
ea94d0fd417635badbcb5a250e904b96ebe1429c833f2a1a09d2127bc2b10d43
-
SHA512
9abeee7e6c41751761e84faabaca3c3e71976c6ee06d07829c2b2549ba43f7fe47ae7d36ae9807e1e2639bae9a906d1272528a098e425b6182fd61e8340cbb06
-
SSDEEP
3072:7hm8qR7j9xhgLTm5NISu6SmzfXaJYIUKDaAcoAn2ZUtPtCHLnWHqSUGiIdQ:U867zy2tjPCUKDaAcv2ZVbXSUGiId
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14e5ba3005a0e58fbe5cecfb32eded60N.exe
Files
-
14e5ba3005a0e58fbe5cecfb32eded60N.exe.dll windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Sections
.text Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.extrel Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dbgmap Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.il Size: 68KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ