c:\Windows\Temp\drone-cbA6LaXGvGFtweiN\drone\src\Common\VPNServiceHost\obj\Debug\VPNServiceHost.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f772a3d27045dcb527460df6952914bc4f0e8beb1d5b3f0bf15f60a87752c929.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
f772a3d27045dcb527460df6952914bc4f0e8beb1d5b3f0bf15f60a87752c929.exe
Resource
win10v2004-20240802-en
General
-
Target
f772a3d27045dcb527460df6952914bc4f0e8beb1d5b3f0bf15f60a87752c929
-
Size
7KB
-
MD5
66246a98cb54a4afdac494974e617bad
-
SHA1
5c745b23b225796cfc9c051888d440dd7377d8ea
-
SHA256
f772a3d27045dcb527460df6952914bc4f0e8beb1d5b3f0bf15f60a87752c929
-
SHA512
bbf0a21dd10e598ef092804bf6f89f2ce28b8355d7aeb3c3e1d3e5b3a57c9d2801dbbdd5926a16939125734198044f2831e3486ccddc71ce8ff091e49fb36708
-
SSDEEP
96:1TZTk7TzfyoiCocqqt6c5I96+Xmlgg4Hfd2ucFGzNt:19kPfyojd6T96+V/ddCA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f772a3d27045dcb527460df6952914bc4f0e8beb1d5b3f0bf15f60a87752c929
Files
-
f772a3d27045dcb527460df6952914bc4f0e8beb1d5b3f0bf15f60a87752c929.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ