C:\Users\oline\source\repos\HzDetection\HzDetection\obj\Release\HzDetection.pdb
Static task
static1
Behavioral task
behavioral1
Sample
HzDetection.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
HzDetection.exe
Resource
win10v2004-20240802-en
General
-
Target
HzDetection.exe
-
Size
10KB
-
MD5
c69bcfb66bf5860db39e98d7b6230211
-
SHA1
c6674dabe57a23008da4336070c7a66b52d1b12c
-
SHA256
2bc2d6e6d6ab14139b1031068022fdf335317eeeda77fbcc73e3abecaaf7af7a
-
SHA512
e3ee196121de7ea7dc379359e8dfb640da9e7f137f1a55db2d5f6e16683d7a84065b947b12b46a83723dd394237dc7cdf646414e09d2e534f6a3ef218377129d
-
SSDEEP
96:PHSA9HfPyQfkBsXkQolwt1GBWjJn33VeZtYAIJU4nWocoDe7Ko3jPJ+Is8VtlQ+v:KkHHboaP6aJnnVyDfnTeIs8VtuY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource HzDetection.exe
Files
-
HzDetection.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ