quick2011_S.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c0b5def64fcd59d80eee28d8757c2497f5ae86dcf2bc06c4e1f5cc7f57825159.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c0b5def64fcd59d80eee28d8757c2497f5ae86dcf2bc06c4e1f5cc7f57825159.exe
Resource
win10v2004-20240802-en
General
-
Target
c0b5def64fcd59d80eee28d8757c2497f5ae86dcf2bc06c4e1f5cc7f57825159
-
Size
6.2MB
-
MD5
5b4c3470702163bb0584f79bdefcc22f
-
SHA1
8fe36b56681887b6c13239cbc60f710665f810c7
-
SHA256
c0b5def64fcd59d80eee28d8757c2497f5ae86dcf2bc06c4e1f5cc7f57825159
-
SHA512
93728e4f4683e39730630bea4e3c9e03ba2af8b585053dad5bc1438acad1facc240d5c65e97e0448a932e71a32a2fab078babef1c7ecb1c60d730fc64fc2d214
-
SSDEEP
98304:PIySgOy929U+p7XZmvndGoDfOKlPo5Vgnj/OQnjbPEujh6Coqtcm1:PIyEy9sUK7XZmvndGaWKuVgzhjbPhpc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0b5def64fcd59d80eee28d8757c2497f5ae86dcf2bc06c4e1f5cc7f57825159
Files
-
c0b5def64fcd59d80eee28d8757c2497f5ae86dcf2bc06c4e1f5cc7f57825159.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 6.1MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 247B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ