C:\agent\_work\1\repos\desktop_repository\Source\UI\PhaseII\obj\x86\Release\PhaseII.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8f60687f3c21589ec8f5e9315fde897bfb07b6716d715738321a5d8cfc1c4d63.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8f60687f3c21589ec8f5e9315fde897bfb07b6716d715738321a5d8cfc1c4d63.exe
Resource
win10v2004-20240802-en
General
-
Target
8f60687f3c21589ec8f5e9315fde897bfb07b6716d715738321a5d8cfc1c4d63
-
Size
335KB
-
MD5
f401113f47d538ee8906d0ab037ef61d
-
SHA1
258026ab81e35312a27a809c558d338ffeeb9264
-
SHA256
8f60687f3c21589ec8f5e9315fde897bfb07b6716d715738321a5d8cfc1c4d63
-
SHA512
ed66c507866834a86bc546982ccfc3556838ebe3ae5ef4ec95444d4618f1e3e0fff437cf6d1b57c445bba73ff0f0329b17be295c745525d5fc4d4f0267d2e69f
-
SSDEEP
6144:NFtSCdAv+HdzI9bgTuvyA38motkVgB5UwdTfDQWnKgTMuW:btyyw8moeVgDhnauW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f60687f3c21589ec8f5e9315fde897bfb07b6716d715738321a5d8cfc1c4d63
Files
-
8f60687f3c21589ec8f5e9315fde897bfb07b6716d715738321a5d8cfc1c4d63.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 310KB - Virtual size: 310KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ