C:\Users\Admin2024\Desktop\Outputs\Vaohir.pdb
Static task
static1
Behavioral task
behavioral1
Sample
tmpn_lplll3.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
tmpn_lplll3.exe
Resource
win10v2004-20240709-en
General
-
Target
tmpn_lplll3
-
Size
116KB
-
MD5
573c0e68dd70ab65a138d159c5e55c7b
-
SHA1
b7a1e3c11184bcee033bf5544c7754efaded98bd
-
SHA256
0e9a9cde396cf2e4fd9f8b265661a9f9b794000f7f7bb42093df4ab5a25f3d96
-
SHA512
c411cdd2161ee392cb7e298fdfc324e16930550d5532ddc688190c625d5264141bb82004375fd4e42264d7f03013fe3671e05cf71a46596c800503b15af7d43b
-
SSDEEP
1536:wR4qLqpobtTJCd17sVk000ipaGESp6FbmD3aAS2gpqBW9INcLc0cmwnt4AzD:NpaxJC/7EjRSp6JAS2gpqBWLdaf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource tmpn_lplll3
Files
-
tmpn_lplll3.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 115KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ