applaunch.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3080e2651ff3ead88f62ac83d75279cb6f6fc4dc744932a57404cc3dd6332af7.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3080e2651ff3ead88f62ac83d75279cb6f6fc4dc744932a57404cc3dd6332af7.exe
Resource
win10v2004-20240802-en
General
-
Target
3080e2651ff3ead88f62ac83d75279cb6f6fc4dc744932a57404cc3dd6332af7
-
Size
4.3MB
-
MD5
63c92497c6108018baee09c2c0e920e8
-
SHA1
31ddbf3ce80e5fec80053ee40f1c46429e21c0ef
-
SHA256
3080e2651ff3ead88f62ac83d75279cb6f6fc4dc744932a57404cc3dd6332af7
-
SHA512
56ef4bc5471a4e33c34ae87f0025f08060f295b6ae9d7c6a1d7c7b21f81f5563aec6ea3d5697efd82f8d8c955169c2d4575c33860a76fe2afb13438d53fbdd80
-
SSDEEP
49152:8/dvDllr/DzvKfNuIhakf8V8y9wSN2cHXC0:KvDllrDzMcOe86ww2i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3080e2651ff3ead88f62ac83d75279cb6f6fc4dc744932a57404cc3dd6332af7
Files
-
3080e2651ff3ead88f62ac83d75279cb6f6fc4dc744932a57404cc3dd6332af7.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ