crysoftwareone.pdb
Static task
static1
Behavioral task
behavioral1
Sample
95fdfbcd308f1993746909d3592955a66f9e36027ad840418dcb517474a553bf.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
95fdfbcd308f1993746909d3592955a66f9e36027ad840418dcb517474a553bf.exe
Resource
win10-20240404-en
General
-
Target
95fdfbcd308f1993746909d3592955a66f9e36027ad840418dcb517474a553bf
-
Size
4.8MB
-
MD5
633b1cab90779e48afacdf57a8473d7a
-
SHA1
37cd0082e79faf3722063c6949c9fee03496f790
-
SHA256
95fdfbcd308f1993746909d3592955a66f9e36027ad840418dcb517474a553bf
-
SHA512
d9d2d416e95d9ffb441208ae5213dd8ead6754b0f461562991172b5958da07d6dd15081fdcd92109c83444c72fecd92ab87942c65dd6e1709d707c00ac771177
-
SSDEEP
49152:Kb9dfk2hBwofy8l8DyZpebEqErUsL2Q70Nd2aijnFOfC9q3QlUa:k9dfkCBZh5B2Q7GMJLUC9kFa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95fdfbcd308f1993746909d3592955a66f9e36027ad840418dcb517474a553bf
Files
-
95fdfbcd308f1993746909d3592955a66f9e36027ad840418dcb517474a553bf.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 4.6MB - Virtual size: 4.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 1024B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 158KB - Virtual size: 158KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ