c:\users\crepto0n\documents\visual studio 2012\Projects\CLEANER\CLEANER\obj\Debug\CLEANER.pdb
Static task
static1
Behavioral task
behavioral1
Sample
09d1aa8ac1853e74ff56f5100318c964d824a5316e5a7bbc2e5d7d856956bffa.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
09d1aa8ac1853e74ff56f5100318c964d824a5316e5a7bbc2e5d7d856956bffa.exe
Resource
win10v2004-20240709-en
General
-
Target
09d1aa8ac1853e74ff56f5100318c964d824a5316e5a7bbc2e5d7d856956bffa
-
Size
217KB
-
MD5
045ee188f7d039c513b75f9374dbbe41
-
SHA1
91aa5987549882647ac30edeb5e48ee70cc78df6
-
SHA256
09d1aa8ac1853e74ff56f5100318c964d824a5316e5a7bbc2e5d7d856956bffa
-
SHA512
764764e92c3fc906bb3211d4f8522b7fa3fbcb4cd548d2c08793e7fa0f5f30a52e7b932cc28b059ad6502c2a35f4e960b363aeed77a52e003b63d344df07ebcc
-
SSDEEP
3072:RK2CR4dsW+GokdgjU81HQh9WFkJ19xLOnY31gd+rvqP2mtlnqdip:R5/9Wp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09d1aa8ac1853e74ff56f5100318c964d824a5316e5a7bbc2e5d7d856956bffa
Files
-
09d1aa8ac1853e74ff56f5100318c964d824a5316e5a7bbc2e5d7d856956bffa.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 203KB - Virtual size: 202KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ