H:\GitRepos\ifel.3\OMEN\obj\Debug\OMEN.pdb
Static task
static1
Behavioral task
behavioral1
Sample
043029a52e80bd28e80e6fde8763e980N.exe
Behavioral task
behavioral2
Sample
043029a52e80bd28e80e6fde8763e980N.exe
General
-
Target
043029a52e80bd28e80e6fde8763e980N.exe
-
Size
1.1MB
-
MD5
043029a52e80bd28e80e6fde8763e980
-
SHA1
93434211c49aba55197447f58ae846db8d0364c3
-
SHA256
812e748e9dcb781a05d5b8372e61ea975a282a3049d44b84194dd6d7ec0b5e3a
-
SHA512
917ef999979989c48d3d75ada139c4e5f73c561124b3c0c28acf7c06506db613e1fc6e30c6d043ed7bba4ce418e0676405d705dba6c48c5f6bf4c41c14ea7a66
-
SSDEEP
6144:U+86UpTHXv6FyTmhDNFoozm/d337X0jXCgCO1d+oesC7XCBUmR/tlMDUo0FrXqHw:eT3gyyhpFooi3EIO1E7XC1Fry/DU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 043029a52e80bd28e80e6fde8763e980N.exe
Files
-
043029a52e80bd28e80e6fde8763e980N.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 118KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ