C:\Users\press\AppData\Local\Temp\Report.A66214F7-6635-4084-8609-050NK772EXE\obj\Debug\otrsoftware.pdb
Static task
static1
Behavioral task
behavioral1
Sample
89ac1362c5092d037d79f015fbe03f1ff3d8dbbcc1379afd16e6c5c10beb2a60.exe
Resource
win7-20240704-en
General
-
Target
89ac1362c5092d037d79f015fbe03f1ff3d8dbbcc1379afd16e6c5c10beb2a60
-
Size
3.0MB
-
MD5
2970d843d964902d511a711174572e18
-
SHA1
9fbf9ef7e9f9d3d3271b8f1bec2cd6f7ca676267
-
SHA256
89ac1362c5092d037d79f015fbe03f1ff3d8dbbcc1379afd16e6c5c10beb2a60
-
SHA512
3fc8be23523d319272848ab1a78f8feb5bfa4665374ee0e1aa0b2e0b7ca841464efc3683591070cf90b6006028cf6f515d1dc961dc18227b4549f8ef4e2582cd
-
SSDEEP
49152:t2dt/HfwAtxHlHR5mY216gaFL+w1W8Wo7IWMckug43KsbHY:tk5fwAttlHRc1U11ENML
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89ac1362c5092d037d79f015fbe03f1ff3d8dbbcc1379afd16e6c5c10beb2a60
Files
-
89ac1362c5092d037d79f015fbe03f1ff3d8dbbcc1379afd16e6c5c10beb2a60.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ