YfQxF.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5987175916db9ba1741024d1fb01c6d9083a9e9c821c402ac96db6d1ce7758fc.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5987175916db9ba1741024d1fb01c6d9083a9e9c821c402ac96db6d1ce7758fc.exe
Resource
win10v2004-20240709-en
General
-
Target
5987175916db9ba1741024d1fb01c6d9083a9e9c821c402ac96db6d1ce7758fc
-
Size
773KB
-
MD5
8621f717a3ae8857db215d606fad87c7
-
SHA1
7f81bee43783d61b85cd836ba522ab636279e09c
-
SHA256
5987175916db9ba1741024d1fb01c6d9083a9e9c821c402ac96db6d1ce7758fc
-
SHA512
7174ab1ea6a4676e34b123113a572ccc45904c23ed3c6b64977d46bb67cc043c811b023bcc39dca7bad5324d4e98d56270c50eff99e8607959895e0a26f94cf3
-
SSDEEP
12288:P2ks/D3HH3DI+r6tbo+cnZ4wL8hZvDfrLXo44SMK8fNSiXcjy3uXiR:eks/jH3DIfs+cn6/j7dp81tcje
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5987175916db9ba1741024d1fb01c6d9083a9e9c821c402ac96db6d1ce7758fc
Files
-
5987175916db9ba1741024d1fb01c6d9083a9e9c821c402ac96db6d1ce7758fc.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 770KB - Virtual size: 769KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ