C:\Users\qfpr\source\repos\MidExploits\MidExploits\obj\Debug\MidExploits.pdb
Static task
static1
General
-
Target
MidExploits.exe
-
Size
28KB
-
MD5
94f13fa726db42f03674f7d0a1d5776f
-
SHA1
962ac931312d8e4ba65f6a07feaf07a597c6a884
-
SHA256
f6ceacf3169da081b317d6e5a135e709402754afd81c447ff7bbcc81886732d7
-
SHA512
ee1f5dd9b18b18fcad7e89a129a6f0c38460fedbf88907955e0d3b02882535d12a266710f7714a8112955fa45537cbac436af0e855b39934b2c0736c20d1e4c6
-
SSDEEP
384:o67iscdixGj5lu2R7G7kjVIE2wry9gDVdsWCvwtokwkwq6uI5XRwA5wA0owAikgS:okncdeGj5nR96wmGDbJC5Xc2Yo5XF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource MidExploits.exe
Files
-
MidExploits.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ