PEDb.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b9996528bea4f182b005ba60e72f604602f0749e5b083a013d6096a3960052d2.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b9996528bea4f182b005ba60e72f604602f0749e5b083a013d6096a3960052d2.exe
Resource
win10v2004-20240802-en
General
-
Target
b9996528bea4f182b005ba60e72f604602f0749e5b083a013d6096a3960052d2.exe
-
Size
760KB
-
MD5
5370dde7050bbae7729e2f399e2412d1
-
SHA1
5eb0fc48560be27829af0bce08def00fe5ee8bc0
-
SHA256
b9996528bea4f182b005ba60e72f604602f0749e5b083a013d6096a3960052d2
-
SHA512
58e1adf5f0c35d8df361355dfcaec3a8ddd6a1b7aa84a224d1bf63baad91b0fc33a4a4896f0560fe72619e5f32e3e6d02bf682475c67af1d8f0b39bba6fe139b
-
SSDEEP
12288:mOiqCwgqaVouq0Pl8qpBiNFwsOCsCV9t1wVwOUkcixwOFpItQzFe:mOiqC/qaSuqK8qpBiNFwszsCV9t6V5Uz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9996528bea4f182b005ba60e72f604602f0749e5b083a013d6096a3960052d2.exe
Files
-
b9996528bea4f182b005ba60e72f604602f0749e5b083a013d6096a3960052d2.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 755KB - Virtual size: 754KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ