C:\Documents and Settings\Administrador\Mis documentos\Dropbox\Privado\Codigo\Visual\visual studio 2005\FarmaUtils_todos\AMH Update\2015\Octubre\16\AMH_Update\AMH_Update\obj\Debug\AMH_Update.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ExeFile (49).exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ExeFile (49).exe
Resource
win10v2004-20240802-en
General
-
Target
ExeFile (49).exe
-
Size
36KB
-
MD5
11d79c08a2552cb86f8c0b52bcceb488
-
SHA1
4b75cd784d91fdd069df85ae7184d07eadc5e3c8
-
SHA256
3add1947f0767ebba3b7c5831590c13321b50532205dfd01d296a0ca33143cdc
-
SHA512
d8bb4351d6da08a661461371487c92b7aa84b87a0f94b623f41b276a33f4207e6782f93ae36665fbec2ef7b7d5fea1c8ed46ad6245df4698b00c98b4f7438a1f
-
SSDEEP
384:VZb/iO4qQD9gfvP96uucJnXIOSCCt//JLL755CmdjJDSW9IVG5dP2cJ:VZbkHcOQClJPtL9F2c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ExeFile (49).exe
Files
-
ExeFile (49).exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 4KB - Virtual size: 247B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ