E:\Users\danie\OneDrive\ee api\EasyExploits\obj\Debug\EasyExploits.pdb
Overview
overview
3Static
static
3AaronS Exe...al.rar
windows10-1703-x64
3AaronS Exe...ts.txt
windows10-1703-x64
1AaronS Exe...ts.dll
windows10-1703-x64
1AaronS Exe...ox.dll
windows10-1703-x64
1AaronS Exe...ox.txt
windows10-1703-x64
1AaronS Exe...ze.txt
windows10-1703-x64
1AaronS Exe...el.txt
windows10-1703-x64
1AaronS Exe...le.txt
windows10-1703-x64
1AaronS Exe...le.txt
windows10-1703-x64
1Static task
static1
Behavioral task
behavioral1
Sample
AaronS Executor tutorial.rar
Resource
win10-20240611-en
Behavioral task
behavioral2
Sample
AaronS Executor tutorial/API Scripts.txt
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
AaronS Executor tutorial/EasyExploits.dll
Resource
win10-20240404-en
Behavioral task
behavioral4
Sample
AaronS Executor tutorial/FastColoredTextBox.dll
Resource
win10-20240404-en
Behavioral task
behavioral5
Sample
AaronS Executor tutorial/Function & Listbox.txt
Resource
win10-20240611-en
Behavioral task
behavioral6
Sample
AaronS Executor tutorial/close_minimize.txt
Resource
win10-20240404-en
Behavioral task
behavioral7
Sample
AaronS Executor tutorial/draggable_panel.txt
Resource
win10-20240404-en
Behavioral task
behavioral8
Sample
AaronS Executor tutorial/open_file.txt
Resource
win10-20240404-en
Behavioral task
behavioral9
Sample
AaronS Executor tutorial/save_file.txt
Resource
win10-20240404-en
General
-
Target
AaronS Executor tutorial.rar
-
Size
117KB
-
MD5
f1a7cf5ea4ba5906b343a807cbbdd7e9
-
SHA1
ee643ff91a40335e395a2619d64830cb2a756c31
-
SHA256
ea9b4b548f36c41d8254730e35f7f44b97bd3b087466b67f9db1a03f2777e577
-
SHA512
1da8f8c831f64c3401e35c4ae192fcc1ec19104fdc6762bc111f7c4b37a469e409968e1bba95def250d8f6c7b2279b017e3a3b6b013f5563cc0aada2f1acc047
-
SSDEEP
3072:5q4DhvNtseLBTC/g1SSYmZTOnpJBGIEfGwPkzEX:bVnDlCdwSbqN
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/AaronS Executor tutorial/EasyExploits.dll unpack001/AaronS Executor tutorial/FastColoredTextBox.dll
Files
-
AaronS Executor tutorial.rar.rar
-
AaronS Executor tutorial/API Scripts.txt
-
AaronS Executor tutorial/EasyExploits.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
AaronS Executor tutorial/FastColoredTextBox.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
D:\Projects_CSharp\FastColoredTextBox\FastColoredTextBox\obj\Debug\FastColoredTextBox.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 320KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
AaronS Executor tutorial/Function & Listbox.txt
-
AaronS Executor tutorial/close_minimize.txt
-
AaronS Executor tutorial/draggable_panel.txt
-
AaronS Executor tutorial/open_file.txt
-
AaronS Executor tutorial/save_file.txt