C:\Program Files\Unity\Hub\Editor\2019.4.40f1\Editor\Data\PlaybackEngines\windowsstandalonesupport\Source\WindowsPlayer\build\bin\x64\Release\WindowsPlayer_x64_Release_.pdb
Static task
static1
Behavioral task
behavioral1
Sample
113ba8679faa1a4a2541e423520bd949b208f5f6de25feb8b2adc456f64d2c12.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
113ba8679faa1a4a2541e423520bd949b208f5f6de25feb8b2adc456f64d2c12.exe
Resource
win10v2004-20240709-en
General
-
Target
113ba8679faa1a4a2541e423520bd949b208f5f6de25feb8b2adc456f64d2c12
-
Size
625KB
-
MD5
80f4a174d22d61549887034c18beb231
-
SHA1
ddf30d38f8720fda7eb1e7cc6da66c88481c52aa
-
SHA256
113ba8679faa1a4a2541e423520bd949b208f5f6de25feb8b2adc456f64d2c12
-
SHA512
ec02f405beebf08f7ab4c9e234fa658123fd53018703e7c5da09b2ccfb1c2c72fc03042bc7e1af5eda80a05f3709c1459266a9fbd8305b3d5304b58b9380825b
-
SSDEEP
12288:3dsGyz383RKPz08dGAMt2IFoLeyTxqB4KeW:3yz383RKArJF/yTxVKp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 113ba8679faa1a4a2541e423520bd949b208f5f6de25feb8b2adc456f64d2c12
Files
-
113ba8679faa1a4a2541e423520bd949b208f5f6de25feb8b2adc456f64d2c12.exe windows:6 windows x64 arch:x64
a2f3dfd3525f27ebdbc8215fc1072f60
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
reverse1999base
ord1
Exports
Exports
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Sections
.ace Size: 22KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ace Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ace Size: 512B - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ace Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ace Size: 512B - Virtual size: 164B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ace Size: 552KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ace Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE