pesp.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Woof LOADER.exe
Resource
win10v2004-20240802-en
General
-
Target
Woof LOADER.exe
-
Size
19.4MB
-
MD5
fb5be65aeeaaef99ed27f04760d577e5
-
SHA1
74c5876d13d6c75cafd06b0c98ef728920cc0e9f
-
SHA256
1fdd7072c6264c7fec263d476514ffdd27eb11831cf2294177ac44acf422b6ac
-
SHA512
b676b3367f4bfef85d3f01aca0395b1321b760b544cadf10bf576b5255fb0fb93f73770279434a35e79669c68c5e9eb7f4502c7ccef6dca273664c95b97e6032
-
SSDEEP
393216:muaRiJX34X996pU38ik8G0yWGvXWkSHEBh4vldMFSokX3ov+qjrw+S:muYiJnwsp9if3bGvKxvgF1knov+f+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Woof LOADER.exe
Files
-
Woof LOADER.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 19.3MB - Virtual size: 19.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 166KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ