C:\Users\Administrator\source\repos\startdllservice\obj\Release\startdllservice.pdb
Static task
static1
Behavioral task
behavioral1
Sample
51EF6C7121D94CB1AF4B6AF23DAADA64.MAL.00000000_SentinelOne.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
51EF6C7121D94CB1AF4B6AF23DAADA64.MAL.00000000_SentinelOne.exe
Resource
win10v2004-20240802-en
General
-
Target
51EF6C7121D94CB1AF4B6AF23DAADA64.MAL.00000000_SentinelOne.bad
-
Size
6.3MB
-
MD5
307d512aaf8a8884d29b172b6f867929
-
SHA1
c7b5a307c7158a12090c8ca38a182a4bd67271e0
-
SHA256
4c1c4ad7ef1b7d72c4f081e8066ed4c02c3670d7bc70602016263c49408530f7
-
SHA512
15219c1a13f0276982d28ea43f7bcae9c8fa363edb6edfdd4c399d6ea012de957eae710f87329f349194e884f81416d380a98f195d4b883e19505448f864269c
-
SSDEEP
49152:EJCFMPnKxXT2Vd7O2VnRWWFeTOp4ePBwZ2xq5ECJPQGctV+GHhHN:pmK27FVQ6p4NEYdcnVN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 51EF6C7121D94CB1AF4B6AF23DAADA64.MAL.00000000_SentinelOne.bad
Files
-
51EF6C7121D94CB1AF4B6AF23DAADA64.MAL.00000000_SentinelOne.bad.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 6.3MB - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ