cLKi.pdb
Static task
static1
Behavioral task
behavioral1
Sample
26c64dc4553b8f6267967b05f024f5e887f24b397025eebcf202a6e43ad58bc7.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
26c64dc4553b8f6267967b05f024f5e887f24b397025eebcf202a6e43ad58bc7.exe
Resource
win10v2004-20240802-en
General
-
Target
26c64dc4553b8f6267967b05f024f5e887f24b397025eebcf202a6e43ad58bc7.exe
-
Size
1.0MB
-
MD5
f89a69fbe6f9b80fa86891504ab7cc71
-
SHA1
7f7766d79a192dcbf2a31b1b3b7fbb7a4bcb7ce7
-
SHA256
26c64dc4553b8f6267967b05f024f5e887f24b397025eebcf202a6e43ad58bc7
-
SHA512
e992564bf156283db83e574de1be0507ec3f9e69a589516047266fcf34310f74b262c13a9094543ad3e223e2f696fe55b8c48e783d08df0740d5da7f837a189d
-
SSDEEP
12288:OGm2iNz42PSuRNOYZVOPEm8RlPi42SYnWxo+E68nfOUUWqWWUFzrvpVXbVD2fkRp:E1x4mR0YZUEmwliLSnxo+sWLWfvR0k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26c64dc4553b8f6267967b05f024f5e887f24b397025eebcf202a6e43ad58bc7.exe
Files
-
26c64dc4553b8f6267967b05f024f5e887f24b397025eebcf202a6e43ad58bc7.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 771KB - Virtual size: 771KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 263KB - Virtual size: 262KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ