C:\Users\danie\source\repos\DanWBR\dwsim\DWSIM\obj\x64\Release\DWSIM.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8b62fe4916c4087c74106fc529e6d6d5efd75ef2602fa867813ddea578992a91.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8b62fe4916c4087c74106fc529e6d6d5efd75ef2602fa867813ddea578992a91.exe
Resource
win10v2004-20240730-en
General
-
Target
8b62fe4916c4087c74106fc529e6d6d5efd75ef2602fa867813ddea578992a91
-
Size
28.7MB
-
MD5
044bbf1a19bb8134b34dd4b4a704a712
-
SHA1
3bf46db7c0bf335706fdcd7c03f7418d56e4bc96
-
SHA256
8b62fe4916c4087c74106fc529e6d6d5efd75ef2602fa867813ddea578992a91
-
SHA512
49c398011849b6528f2bde845739f13eaac537579b7f216b8328a77cd39f082b3888a387e2fd6af4ba7f9d47a93e98a76e3cf452de777ffc4af4527dcfaf7915
-
SSDEEP
393216:fJxKSxYEr2kZNC4obT0HYa7rXSXxVB1dShMPW2:fJxK2LQ0DWt1dVO2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b62fe4916c4087c74106fc529e6d6d5efd75ef2602fa867813ddea578992a91
Files
-
8b62fe4916c4087c74106fc529e6d6d5efd75ef2602fa867813ddea578992a91.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 28.7MB - Virtual size: 28.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ