C:\Users\damia_de0etcp\Desktop\Cluttscape_tutorial\Cluttscape_tutorial\obj\Release\NOWAYBACK.pdb
Static task
static1
1 signatures
General
-
Target
NOWAYBACK.exe
-
Size
2.8MB
-
MD5
fdc6e1dd0961eb419c377fdf560b1515
-
SHA1
cebc4bd78056a49f0f2275facf3ec8992ca13e8b
-
SHA256
dbbef18a9b2e5979d20a7d44f0f147aea9e9b8e2903243ed09a04a182a831d2a
-
SHA512
128c34b343681a3e0acf9ab5b7ee6520b2b760638c819447d5df41bdf64f56f764ffd5a752e14c71b853e721cadf34250555cd44bf78c8b4ddf70d245d858d39
-
SSDEEP
6144:D49bmgXKNGwlmk0lM/NfWSOGV6VLIFSjWxcvr2LCQQVMjhyjI/aLBaw:sgyKNGq0g6Gkk6v/hMNyc/c1
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NOWAYBACK.exe
Files
-
NOWAYBACK.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ