One_cloud2support.pdb
Static task
static1
Behavioral task
behavioral1
Sample
11be78b744d48be7f5c1438c93fa28fc0b66ddc5fad50d091149a951f3002c49.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
11be78b744d48be7f5c1438c93fa28fc0b66ddc5fad50d091149a951f3002c49.exe
Resource
win10v2004-20240802-en
General
-
Target
11be78b744d48be7f5c1438c93fa28fc0b66ddc5fad50d091149a951f3002c49.exe
-
Size
4.1MB
-
MD5
87842c44385a9c22e2d47b4fe85566dc
-
SHA1
10e5c0d68e885843ce2ba5ca1cf44b47668d8e85
-
SHA256
11be78b744d48be7f5c1438c93fa28fc0b66ddc5fad50d091149a951f3002c49
-
SHA512
6e73439c4d93630d098f36139888aecb8f04666739cad81d8493115caf7876c21f8180d92fdf95b101802a4ca822679ee0ba16866e695c9a53b968d636c680de
-
SSDEEP
49152:RYb8pEkg/hv5VZtZ81CxBss47oBTQfjTajnoFzJjss+exivznT7b5dRjy8v1jlxh:RQQfgJ7lxSEOjhFtj5ALvFzyAjXh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11be78b744d48be7f5c1438c93fa28fc0b66ddc5fad50d091149a951f3002c49.exe
Files
-
11be78b744d48be7f5c1438c93fa28fc0b66ddc5fad50d091149a951f3002c49.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 1024B - Virtual size: 598B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 710KB - Virtual size: 710KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ