C:\Users\bubid\source\repos\WpfApp2\WpfApp2\obj\Debug\WpfApp2.pdb
Overview
overview
3Static
static
3WpfApp2.rar
windows7-x64
3WpfApp2.rar
windows10-2004-x64
3WpfApp2/.v....vsidx
windows7-x64
3WpfApp2/.v....vsidx
windows10-2004-x64
3WpfApp2/.v...7/.suo
windows7-x64
3WpfApp2/.v...7/.suo
windows10-2004-x64
3WpfApp2/.v...t.json
windows7-x64
3WpfApp2/.v...t.json
windows10-2004-x64
3WpfApp2/De....1.exe
windows7-x64
1WpfApp2/De....1.exe
windows10-2004-x64
1WpfApp2/De...config
windows7-x64
3WpfApp2/De...config
windows10-2004-x64
3WpfApp2/De...p2.pdb
windows7-x64
3WpfApp2/De...p2.pdb
windows10-2004-x64
3WpfApp2/De...p2.sln
windows7-x64
3WpfApp2/De...p2.sln
windows10-2004-x64
3WpfApp2/De...nfo.cs
windows7-x64
3WpfApp2/De...nfo.cs
windows10-2004-x64
3WpfApp2/De...er.vbs
windows7-x64
1WpfApp2/De...er.vbs
windows10-2004-x64
1WpfApp2/De...es.vbs
windows7-x64
1WpfApp2/De...es.vbs
windows10-2004-x64
1WpfApp2/De...ner.cs
windows7-x64
3WpfApp2/De...ner.cs
windows10-2004-x64
3WpfApp2/De...ttings
windows7-x64
3WpfApp2/De...ttings
windows10-2004-x64
3WpfApp2/De...tes.cs
windows7-x64
1WpfApp2/De...tes.cs
windows10-2004-x64
1WpfApp2/De...p.g.cs
windows7-x64
3WpfApp2/De...p.g.cs
windows10-2004-x64
3WpfApp2/De...g.i.cs
windows7-x64
3WpfApp2/De...g.i.cs
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
WpfApp2.rar
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
WpfApp2.rar
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
WpfApp2/.vs/WpfApp2/FileContentIndex/323afef1-1e34-4199-bfad-1361d5b515fa.vsidx
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
WpfApp2/.vs/WpfApp2/FileContentIndex/323afef1-1e34-4199-bfad-1361d5b515fa.vsidx
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
WpfApp2/.vs/WpfApp2/v17/.suo
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
WpfApp2/.vs/WpfApp2/v17/.suo
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
WpfApp2/.vs/WpfApp2/v17/DocumentLayout.json
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
WpfApp2/.vs/WpfApp2/v17/DocumentLayout.json
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
WpfApp2/Deluxie/Deluxie v1.1.exe
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
WpfApp2/Deluxie/Deluxie v1.1.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
WpfApp2/Deluxie/Stuff/WpfApp2.exe.config
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
WpfApp2/Deluxie/Stuff/WpfApp2.exe.config
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
WpfApp2/Deluxie/Stuff/WpfApp2.pdb
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
WpfApp2/Deluxie/Stuff/WpfApp2.pdb
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
WpfApp2/Deluxie/Stuff/WpfApp2.sln
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
WpfApp2/Deluxie/Stuff/WpfApp2.sln
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
WpfApp2/Deluxie/Stuff/WpfApp2/Properties/AssemblyInfo.cs
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
WpfApp2/Deluxie/Stuff/WpfApp2/Properties/AssemblyInfo.cs
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
WpfApp2/Deluxie/Stuff/WpfApp2/Properties/Resources.Designer.vbs
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
WpfApp2/Deluxie/Stuff/WpfApp2/Properties/Resources.Designer.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
WpfApp2/Deluxie/Stuff/WpfApp2/Properties/Resources.vbs
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
WpfApp2/Deluxie/Stuff/WpfApp2/Properties/Resources.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
WpfApp2/Deluxie/Stuff/WpfApp2/Properties/Settings.Designer.cs
Resource
win7-20240705-en
Behavioral task
behavioral24
Sample
WpfApp2/Deluxie/Stuff/WpfApp2/Properties/Settings.Designer.cs
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
WpfApp2/Deluxie/Stuff/WpfApp2/Properties/Settings.settings
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
WpfApp2/Deluxie/Stuff/WpfApp2/Properties/Settings.settings
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
WpfApp2/Deluxie/Stuff/WpfApp2/obj/Debug/.NETFramework,Version=v4.8.AssemblyAttributes.cs
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
WpfApp2/Deluxie/Stuff/WpfApp2/obj/Debug/.NETFramework,Version=v4.8.AssemblyAttributes.cs
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
WpfApp2/Deluxie/Stuff/WpfApp2/obj/Debug/App.g.cs
Resource
win7-20240705-en
Behavioral task
behavioral30
Sample
WpfApp2/Deluxie/Stuff/WpfApp2/obj/Debug/App.g.cs
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
WpfApp2/Deluxie/Stuff/WpfApp2/obj/Debug/App.g.i.cs
Resource
win7-20240705-en
Behavioral task
behavioral32
Sample
WpfApp2/Deluxie/Stuff/WpfApp2/obj/Debug/App.g.i.cs
Resource
win10v2004-20240709-en
General
-
Target
WpfApp2.rar
-
Size
77KB
-
MD5
6c27d31525089c138b04d7a975d3d702
-
SHA1
e69a32bced98d6b24db31c13c4fd64cbc4f843a7
-
SHA256
83ef82664f774c190246601f523852545345e5501c9c0578534468f3fb558d01
-
SHA512
e6019eb6cd1af0483b1b944897ae9617fb204739f2474ebcd7de01982ce2ea168e260ebfebe7fba2f3afadd8b97c3c3da5b9081f27ee5ac53dc7cc208dbe168d
-
SSDEEP
1536:W4ZRRYX/H/5nmEWAMoZLUCBhgCJAMoZLAUvKwuHYdn6RTT7c:VZvYXhlUCBe/AUO4dnqc
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/WpfApp2/Deluxie/Deluxie v1.1.exe unpack001/WpfApp2/Deluxie/Stuff/WpfApp2/obj/Debug/WpfApp2.exe
Files
-
WpfApp2.rar.rar
-
WpfApp2/.vs/WpfApp2/FileContentIndex/323afef1-1e34-4199-bfad-1361d5b515fa.vsidx
-
WpfApp2/.vs/WpfApp2/v17/.suo
-
WpfApp2/.vs/WpfApp2/v17/DocumentLayout.json
-
WpfApp2/Deluxie/Deluxie v1.1.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
WpfApp2/Deluxie/Stuff/WpfApp2.exe.config
-
WpfApp2/Deluxie/Stuff/WpfApp2.pdb
-
WpfApp2/Deluxie/Stuff/WpfApp2.sln
-
WpfApp2/Deluxie/Stuff/WpfApp2/Properties/AssemblyInfo.cs
-
WpfApp2/Deluxie/Stuff/WpfApp2/Properties/Resources.Designer.cs.vbs
-
WpfApp2/Deluxie/Stuff/WpfApp2/Properties/Resources.resx.vbs
-
WpfApp2/Deluxie/Stuff/WpfApp2/Properties/Settings.Designer.cs
-
WpfApp2/Deluxie/Stuff/WpfApp2/Properties/Settings.settings
-
WpfApp2/Deluxie/Stuff/WpfApp2/obj/Debug/.NETFramework,Version=v4.8.AssemblyAttributes.cs
-
WpfApp2/Deluxie/Stuff/WpfApp2/obj/Debug/App.g.cs
-
WpfApp2/Deluxie/Stuff/WpfApp2/obj/Debug/App.g.i.cs
-
WpfApp2/Deluxie/Stuff/WpfApp2/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
-
WpfApp2/Deluxie/Stuff/WpfApp2/obj/Debug/MainWindow.baml
-
WpfApp2/Deluxie/Stuff/WpfApp2/obj/Debug/MainWindow.g.cs
-
WpfApp2/Deluxie/Stuff/WpfApp2/obj/Debug/MainWindow.g.i.cs
-
WpfApp2/Deluxie/Stuff/WpfApp2/obj/Debug/WpfApp2.Properties.Resources.resources
-
WpfApp2/Deluxie/Stuff/WpfApp2/obj/Debug/WpfApp2.csproj.AssemblyReference.cache
-
WpfApp2/Deluxie/Stuff/WpfApp2/obj/Debug/WpfApp2.csproj.CoreCompileInputs.cache
-
WpfApp2/Deluxie/Stuff/WpfApp2/obj/Debug/WpfApp2.csproj.FileListAbsolute.txt
-
WpfApp2/Deluxie/Stuff/WpfApp2/obj/Debug/WpfApp2.csproj.GenerateResource.cache
-
WpfApp2/Deluxie/Stuff/WpfApp2/obj/Debug/WpfApp2.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\Users\bubid\source\repos\WpfApp2\WpfApp2\obj\Debug\WpfApp2.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
WpfApp2/Deluxie/Stuff/WpfApp2/obj/Debug/WpfApp2.g.resources
-
WpfApp2/Deluxie/Stuff/WpfApp2/obj/Debug/WpfApp2.pdb
-
WpfApp2/Deluxie/Stuff/WpfApp2/obj/Debug/WpfApp2_MarkupCompile.cache
-
WpfApp2/Deluxie/Stuff/WpfApp2/obj/Debug/WpfApp2_MarkupCompile.i.cache
-
WpfApp2/Deluxie/Stuff/WpfApp2/sigma/test/App.config
-
WpfApp2/Deluxie/Stuff/WpfApp2/sigma/test/App.xaml
-
WpfApp2/Deluxie/Stuff/WpfApp2/sigma/test/App.xaml.cs
-
WpfApp2/Deluxie/Stuff/WpfApp2/sigma/test/MainWindow.xaml
-
WpfApp2/Deluxie/Stuff/WpfApp2/sigma/test/MainWindow.xaml.cs
-
WpfApp2/Deluxie/Stuff/WpfApp2/sigma/test/WpfApp2.csproj
-
WpfApp2/Deluxie/Stuff/WpfApp2/sigma/test/WpfApp2.csproj.user