jrUB.pdb
Static task
static1
Behavioral task
behavioral1
Sample
668493fe37aeaea5f2e74a1a4b7d36b8a65728d317ecc8bbc7f0f2a7de549af4.exe
Behavioral task
behavioral2
Sample
668493fe37aeaea5f2e74a1a4b7d36b8a65728d317ecc8bbc7f0f2a7de549af4.exe
General
-
Target
668493fe37aeaea5f2e74a1a4b7d36b8a65728d317ecc8bbc7f0f2a7de549af4.exe
-
Size
742KB
-
MD5
0b23a8c7d1849ad79eae359e1344fa3a
-
SHA1
18abb78b1f878b66f741e76c085e4e09670f754b
-
SHA256
668493fe37aeaea5f2e74a1a4b7d36b8a65728d317ecc8bbc7f0f2a7de549af4
-
SHA512
bf4e133920475fabc04861b0b579100a04767d252446ac9c839e337d1987d4780562c2f30f6ac9e9e7ea0835ba0286d15b801faae5131efa059ded27a1baa85f
-
SSDEEP
12288:RdOSDzsijEV0OMTMTh2dIHazTUs6OKtyMz+PD3UsHUHgqKxCE4/DpcwFqUSGds9P:RdOSDDjsMAThwUazTt6Dpz+7HUAqKIER
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 668493fe37aeaea5f2e74a1a4b7d36b8a65728d317ecc8bbc7f0f2a7de549af4.exe
Files
-
668493fe37aeaea5f2e74a1a4b7d36b8a65728d317ecc8bbc7f0f2a7de549af4.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 739KB - Virtual size: 739KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ