TlbImp.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4fae2256ce63b19479673d900d175c90N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4fae2256ce63b19479673d900d175c90N.exe
Resource
win10v2004-20240802-en
General
-
Target
4fae2256ce63b19479673d900d175c90N.exe
-
Size
76KB
-
MD5
4fae2256ce63b19479673d900d175c90
-
SHA1
634b88d075ccb1c372f839bcd238abe9755bc975
-
SHA256
cf8f0475f3885cf9384e47de7f47ff16e32b3c772494fc9ea9df2bc8b69d121d
-
SHA512
0d5935e5add9f640b12077cc011e152ed58fd251b77ee9b8af8123218c74e42b39acfeb87eb4c8c46b5a3c229249fb5df756c73ac9d0458cbc914ed5f2fa856b
-
SSDEEP
1536:kMA3+tE02/j/WIM9GyFx0+kLFbGCq2iW7z:OK2/jvM9GycbL1GCH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4fae2256ce63b19479673d900d175c90N.exe
Files
-
4fae2256ce63b19479673d900d175c90N.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
]����u Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE