IFyx.pdb
Static task
static1
Behavioral task
behavioral1
Sample
61ebc7c6cd424b7043ee4df8e01489d66259a23979593fa1a5e7fbf54fe4ef4f.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
61ebc7c6cd424b7043ee4df8e01489d66259a23979593fa1a5e7fbf54fe4ef4f.exe
Resource
win10v2004-20240802-en
General
-
Target
2893e5b3a7ec45648d209ffe13b912994e6cc867400eb5730d89d06deac41713
-
Size
915KB
-
MD5
1a5b9b267b79b6f18518f33f073a9696
-
SHA1
362a8a57f6de014e76ddfaf2bdcc02510437a2be
-
SHA256
2893e5b3a7ec45648d209ffe13b912994e6cc867400eb5730d89d06deac41713
-
SHA512
9ace8ec352e18b53fb036f08be86ffe48b2a0a824ce52af747ff6d04b23a8bbd35f28859a26d727c088ab8f49cf57a7581e9b4df96b567f6b80c134dac68e613
-
SSDEEP
24576:V4xGyuFNgZWHZRThqp6731Qwi7N6nr2pkoRP9bztHK:6neK45RThqcD1QOqp5fVK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/61ebc7c6cd424b7043ee4df8e01489d66259a23979593fa1a5e7fbf54fe4ef4f.exe
Files
-
2893e5b3a7ec45648d209ffe13b912994e6cc867400eb5730d89d06deac41713.zip
Password: infected
-
61ebc7c6cd424b7043ee4df8e01489d66259a23979593fa1a5e7fbf54fe4ef4f.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 985KB - Virtual size: 984KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ