ZdFN.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a2584975149658da70c801f79fbfdcdd66eddf114b84332d401d2ad6a0ddbf78.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a2584975149658da70c801f79fbfdcdd66eddf114b84332d401d2ad6a0ddbf78.exe
Resource
win10v2004-20240709-en
General
-
Target
a2584975149658da70c801f79fbfdcdd66eddf114b84332d401d2ad6a0ddbf78.exe
-
Size
701KB
-
MD5
7cc86a3f83fbb68e1a39193fd097304f
-
SHA1
6e9f665a7f7266ad1a4d1693e84f3203744407c2
-
SHA256
a2584975149658da70c801f79fbfdcdd66eddf114b84332d401d2ad6a0ddbf78
-
SHA512
ef165943e3a378449976c8212bbfbfe91697fdf39afd6e52149395c7d1bb1796e9cb95eb6367017209b62aa2d00e97883ec0019b95869a265cc9010dbfbf1dfe
-
SSDEEP
12288:ICc07BN2iN/QIuIBhye/+B0j17pgLF6Mkmwhbv/P2LRWZqk14GB:ICc07BN1FAay5Be9OkMk5VvHOEt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2584975149658da70c801f79fbfdcdd66eddf114b84332d401d2ad6a0ddbf78.exe
Files
-
a2584975149658da70c801f79fbfdcdd66eddf114b84332d401d2ad6a0ddbf78.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 698KB - Virtual size: 697KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ