C:\Users\press\AppData\Local\Temp\Report.A66214F7-6635-4084-8609-050NK772EXE\obj\Debug\bigsoft.pdb
Static task
static1
Behavioral task
behavioral1
Sample
34fea1a2974d12c2d3424ac6c9a23c6587cfad57002b2e6d335b6899f1261e48.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
34fea1a2974d12c2d3424ac6c9a23c6587cfad57002b2e6d335b6899f1261e48.exe
Resource
win10v2004-20240709-en
General
-
Target
34fea1a2974d12c2d3424ac6c9a23c6587cfad57002b2e6d335b6899f1261e48
-
Size
2.8MB
-
MD5
2be47ed15200d025cb4c627c46ee1888
-
SHA1
daa9eb2ea1b93f5092423e26380d5bc1ba9647a5
-
SHA256
34fea1a2974d12c2d3424ac6c9a23c6587cfad57002b2e6d335b6899f1261e48
-
SHA512
0ce344156cc8b85a5f8d6e8b51a89aee396056ce07bae55cfade8236518336a8846723ce96bb600b53fe5391acbecfdc99b75d188bd682fccb26937ecb1e6e46
-
SSDEEP
49152:gKCDPYJjfGY8RbVM8+jV0Cq8iTaC5TzUYGU2U4/qRZfKz1EAG0oH28U:zmPYJLTaVk0XdagRGtEU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34fea1a2974d12c2d3424ac6c9a23c6587cfad57002b2e6d335b6899f1261e48
Files
-
34fea1a2974d12c2d3424ac6c9a23c6587cfad57002b2e6d335b6899f1261e48.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ