C:\Users\hersonskiy\Desktop\ПрепроводительнаяВедомость.NET\Исходные тексты\obj\Debug\Ведомость.pdb
Static task
static1
Behavioral task
behavioral1
Sample
20be7bbf893bf80f80ba108509fe93c9d4782a194d0d94a829408f0bb9cab344.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
20be7bbf893bf80f80ba108509fe93c9d4782a194d0d94a829408f0bb9cab344.exe
Resource
win10v2004-20240802-en
General
-
Target
20be7bbf893bf80f80ba108509fe93c9d4782a194d0d94a829408f0bb9cab344
-
Size
481KB
-
MD5
113a5b084bf7b873def64c11ea27d1be
-
SHA1
aa61b463ccf85cc45a8c2285161ee6e595372cc3
-
SHA256
20be7bbf893bf80f80ba108509fe93c9d4782a194d0d94a829408f0bb9cab344
-
SHA512
824cc9a9759731de7c9e38a2b73c737c1e36e6a34ee46e3872fe7ef8c65401264f72a7ab38ac5f6e8964938c843a8746446e820da4742015d9e1701d9fd4af0b
-
SSDEEP
6144:/CsiZmMpt+ZcnDYwWz1o73mmTBZcnDYwWz1o73mmTof/U7ZsnXYwWz1o73vyo:PiZlqHu7WmTvHu7WmToHUNlu7fyo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20be7bbf893bf80f80ba108509fe93c9d4782a194d0d94a829408f0bb9cab344
Files
-
20be7bbf893bf80f80ba108509fe93c9d4782a194d0d94a829408f0bb9cab344.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 346KB - Virtual size: 345KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 134KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ