X:\workspaces\Azuresign\Build\WindowsNDAService_Build\rft-allProjects\DiscoveryAgentUpdater\obj\Debug\DiscoveryAgentUpdater.pdb
Static task
static1
Behavioral task
behavioral1
Sample
9425cfa6a150f738eb766196c64ef478f21529d6f47255c60e3d5454bad58e5e.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9425cfa6a150f738eb766196c64ef478f21529d6f47255c60e3d5454bad58e5e.exe
Resource
win10v2004-20240802-en
General
-
Target
9425cfa6a150f738eb766196c64ef478f21529d6f47255c60e3d5454bad58e5e
-
Size
25KB
-
MD5
7deeb6dfef83355e755478bd5c1f1525
-
SHA1
7a7b23d24ec1835243cf5935faa16f876f1dcc71
-
SHA256
9425cfa6a150f738eb766196c64ef478f21529d6f47255c60e3d5454bad58e5e
-
SHA512
ff19aede28777e5ba59947816b558dd7a5b012dd92b30945b17acf1c4da42f1b46b811b731af92503f62769e5684ccf11f64137a2fd64935d34dd99a597eb7d9
-
SSDEEP
384:OS0lpxv8rnJdtxhzZN7dtXcw5TTx2RhZWM6RNC6sCV/WLB7rxYbnkk:Ot8rJdHhzzdCw5HaZ9Tc6p0nkk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9425cfa6a150f738eb766196c64ef478f21529d6f47255c60e3d5454bad58e5e
Files
-
9425cfa6a150f738eb766196c64ef478f21529d6f47255c60e3d5454bad58e5e.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ