C:\Users\You\Desktop\Hacking stuff\virusthing\obj\Debug\virusthing2.pdb
Static task
static1
Behavioral task
behavioral1
Sample
406dd3196a4a5b977eff351d79da95a0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
406dd3196a4a5b977eff351d79da95a0N.exe
Resource
win10v2004-20240802-en
General
-
Target
406dd3196a4a5b977eff351d79da95a0N.exe
-
Size
506KB
-
MD5
406dd3196a4a5b977eff351d79da95a0
-
SHA1
8d7524d59f0bda36c85ee6779cd6f16d0636eb45
-
SHA256
a6f7e0989a0aae8b66f4c4a56d5dce56b356aec9777008e41b5bd4dce3d124f1
-
SHA512
8cae2c9a48e4ddba4af923f3a09e22c1e941e61a60b3e0182a7b0a3534490230e8cfea914947da0479ecf9e08b0d73d7aa1aeecbba9b45eb1ab57d5b728518b8
-
SSDEEP
6144:/pW2bgbbV28okoS1oWMkdlZQ5iioc+nBkl7qCJzk+5:/pW2IoioS6Fz5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 406dd3196a4a5b977eff351d79da95a0N.exe
Files
-
406dd3196a4a5b977eff351d79da95a0N.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 134KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ