ZUhv.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3551b37a5dfbb6f4b3a9fcbe1c8548bebc022d3c92ef2237feefe3e4f6e063b9.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3551b37a5dfbb6f4b3a9fcbe1c8548bebc022d3c92ef2237feefe3e4f6e063b9.exe
Resource
win10v2004-20240709-en
General
-
Target
3551b37a5dfbb6f4b3a9fcbe1c8548bebc022d3c92ef2237feefe3e4f6e063b9
-
Size
812KB
-
MD5
f5265d837a61cab0e79a767877196b31
-
SHA1
fc6adb91ed37c2f37c9d84f02af1cc64dfb9228e
-
SHA256
3551b37a5dfbb6f4b3a9fcbe1c8548bebc022d3c92ef2237feefe3e4f6e063b9
-
SHA512
1f7a588c9e414f794808a834d4978e1a2354112f3f1977c49fdc5a2a7d0b86ec2dfa620aef7f55d9f3749de46c2dd3516db63dd9889af306c4af463f220c25cc
-
SSDEEP
12288:XCc0FxBN2iN/jTWT26oD6NK8v0Y5B4QM2MMnM8ey24u1rOPZzkd/14GB:XCc0FxBN1F3WS6muKWBI+pedTN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3551b37a5dfbb6f4b3a9fcbe1c8548bebc022d3c92ef2237feefe3e4f6e063b9
Files
-
3551b37a5dfbb6f4b3a9fcbe1c8548bebc022d3c92ef2237feefe3e4f6e063b9.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 809KB - Virtual size: 808KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ