D:\ci\workspace\vista.install---2f0874d2\VistaControlRestart\obj\x86\Release\VistaControlRestart.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ff6c3663363620f39e6efd765200824848a7755ffdd7a81bb251e6c5831bc5f1.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ff6c3663363620f39e6efd765200824848a7755ffdd7a81bb251e6c5831bc5f1.exe
Resource
win10v2004-20240709-en
General
-
Target
ff6c3663363620f39e6efd765200824848a7755ffdd7a81bb251e6c5831bc5f1
-
Size
245KB
-
MD5
5de2a75a95e85321ec883c2509491593
-
SHA1
ec467eee256863eba1b9e81e631826539a9ea873
-
SHA256
ff6c3663363620f39e6efd765200824848a7755ffdd7a81bb251e6c5831bc5f1
-
SHA512
0888d886c29117c1bbffdcc08d155a63da89692f91c7d3eec890bad84663660471da12d8eb1c386bb86d002727eba0ef658a7cc402e79959dc3e852b25d8df65
-
SSDEEP
3072:aSUu34ScWf6m0FDJ/BWFva6TTNkbrT0wmuq6q1TbIkXKK1kwA+NEmLjGsbeRT:aS3EFDsiCyr09TbRZE6jGf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff6c3663363620f39e6efd765200824848a7755ffdd7a81bb251e6c5831bc5f1
Files
-
ff6c3663363620f39e6efd765200824848a7755ffdd7a81bb251e6c5831bc5f1.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 202KB - Virtual size: 201KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ