C:\Users\Admin2024\Desktop\Outputs\Zuzefudxu.pdb
Static task
static1
Behavioral task
behavioral1
Sample
gunzipped.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
gunzipped.exe
Resource
win10v2004-20240704-en
General
-
Target
gunzipped.exe
-
Size
123KB
-
MD5
dd4f5cbd58b0f61c045bb5dd0a843fa5
-
SHA1
689376a01eedaa37df77f054efbcb48ab637856d
-
SHA256
a11e5e97a308ee046545cfe0167079f89968f9a1d7ae0b8a9dbc7dc39cbe2e09
-
SHA512
081101de416c8422009fe125e7f1d047a83e11dc710439bff2b2d52f810d263aacea18a3f82fc0a6d791e90362f7a14bcaf0143003ae0ec70616e6b0eb81495b
-
SSDEEP
1536:0+feNoQi3CjLGpIccs2SxXTf2WN9+Zu4VqWwryRNPTYtxYTnAeHz5JTpSUDzctjr:Uoh9csuWCSkN0wnA6z57SmCo8H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource gunzipped.exe
Files
-
gunzipped.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 122KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ