D:\Buecher\Visual Basic 2010 - Grundlagen\Teil3 - WPF\31 Controls\Ribbon_Bsp\Ribbon_Bsp\obj\Debug\Ribbon_Bsp.pdb
Static task
static1
Behavioral task
behavioral1
Sample
792ff034e50045bff7adc772e6f50ca586b18e2b8bee83f4de73b55d811c6edf.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
792ff034e50045bff7adc772e6f50ca586b18e2b8bee83f4de73b55d811c6edf.exe
Resource
win10v2004-20240802-en
General
-
Target
792ff034e50045bff7adc772e6f50ca586b18e2b8bee83f4de73b55d811c6edf
-
Size
360KB
-
MD5
6e9ce6a252763995e688d80728723c58
-
SHA1
cd216aa238cb9e64d1e1422cfd69b24ee8c95289
-
SHA256
792ff034e50045bff7adc772e6f50ca586b18e2b8bee83f4de73b55d811c6edf
-
SHA512
1ae4320bec2a736a4c0b6eab0ab48846e989e20b48e1516436549ccef422510a5c200927b24a43ec9b4d0315171d0cf106bbf01be0687d43e5ebf1018f8829d4
-
SSDEEP
6144:X5fAHPNzptMPdDQb2g5p1306XYVQVlZJ20ybQbEIK2yZRSZ:lAvZww2g5ptvYYlZJ20yQEwyO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 792ff034e50045bff7adc772e6f50ca586b18e2b8bee83f4de73b55d811c6edf
Files
-
792ff034e50045bff7adc772e6f50ca586b18e2b8bee83f4de73b55d811c6edf.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 346KB - Virtual size: 345KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ