C:\Users\Doberenz\B U E C H E R\HANSER\VB 2010\VB_GL_BUCH\NEU\CODE\03 OOP\Praxisbeispiele\04 Interface\WindowsApplication1\WindowsApplication1\obj\x86\Debug\WindowsApplication1.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ef5614c6650ae9a32b1f1e6ae6c9668dac4810b1d8b88cc48d14519813a3214d.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ef5614c6650ae9a32b1f1e6ae6c9668dac4810b1d8b88cc48d14519813a3214d.exe
Resource
win10v2004-20240802-en
General
-
Target
ef5614c6650ae9a32b1f1e6ae6c9668dac4810b1d8b88cc48d14519813a3214d
-
Size
24KB
-
MD5
4b917f04de599fb44ddb4d4d843252f8
-
SHA1
49b9dd5f7771fecfa37bb4f60701e152dc7a52e0
-
SHA256
ef5614c6650ae9a32b1f1e6ae6c9668dac4810b1d8b88cc48d14519813a3214d
-
SHA512
a115da4ae6b5a6b0f4691b70c55a0741cabc79a3c668efb26aecd93400881eea45367309f30d76b81b69fe77759589dbd7186b955c43f0e549d634f78a60d597
-
SSDEEP
384:rDIc7mIvfgHTg84SxzCwKGWyhJL724jcPTso4/z1+d7cO0zdTvRHIXoylXF:rZS/gcCZVABcPAoe/JIflX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef5614c6650ae9a32b1f1e6ae6c9668dac4810b1d8b88cc48d14519813a3214d
Files
-
ef5614c6650ae9a32b1f1e6ae6c9668dac4810b1d8b88cc48d14519813a3214d.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 233B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ