VVDFTRTR3434.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e6a9d95be9394f5ce9aa2b0c8fa10f929820e3caf2842fdb20ef341af6cf37be.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
e6a9d95be9394f5ce9aa2b0c8fa10f929820e3caf2842fdb20ef341af6cf37be.exe
Resource
win10v2004-20240709-en
General
-
Target
e6a9d95be9394f5ce9aa2b0c8fa10f929820e3caf2842fdb20ef341af6cf37be
-
Size
1019KB
-
MD5
931e19a8d7719ca2346a0d3f58632e8c
-
SHA1
193cda97b0fb5aca21af2ad65bc4fc4ecfbf147c
-
SHA256
e6a9d95be9394f5ce9aa2b0c8fa10f929820e3caf2842fdb20ef341af6cf37be
-
SHA512
090292102b2a0204faedb4f87fed768d961fda9e020d10c94c5603775dbef9624cd709316f1856660abf0ea29ef7e80aaebb800e29be7f458ea8601cb4f6ab6b
-
SSDEEP
24576:yJ39RKT/M4UQieap4gSzb/73LRTJl+41ZNjarUIn:i9RiHUQiVOnvRTNNbIn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e6a9d95be9394f5ce9aa2b0c8fa10f929820e3caf2842fdb20ef341af6cf37be
Files
-
e6a9d95be9394f5ce9aa2b0c8fa10f929820e3caf2842fdb20ef341af6cf37be.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 1010KB - Virtual size: 1009KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 354B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ