c:\slam_ransomware_builder\ConsoleApp2\ConsoleApp2\obj\Debug\ConsoleApp2.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1 (2).exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
1 (2).exe
Resource
win10v2004-20240709-en
General
-
Target
1 (2).exe
-
Size
925KB
-
MD5
5ff769ff13ba508089cfb5894b9a8736
-
SHA1
e658001283f760651109fb0cc342d596201c7f45
-
SHA256
4868b3c263fdaf8dd3d124d5e7a8f02889f94af20f4bfd4d584f443ffee37d4a
-
SHA512
e088f0e9cb01274e9867fa956c9398fed0bf1e7e791dafe646230c10913f393512883d2d7e860fee763a39861c843a360d243a566e0320995db1e6dffefa5da3
-
SSDEEP
24576:U8m657w6ZBLmkitKqBCjC0PDgM5AH5DT5:4VV1BCjBEDT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1 (2).exe
Files
-
1 (2).exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 854KB - Virtual size: 853KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ