h:\Secret\Hacker.KeySpy\obj\Debug\svchost.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4a98a9cfed4b48abc820ebc3f1a10ef0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4a98a9cfed4b48abc820ebc3f1a10ef0N.exe
Resource
win10v2004-20240802-en
General
-
Target
4a98a9cfed4b48abc820ebc3f1a10ef0N.exe
-
Size
75KB
-
MD5
4a98a9cfed4b48abc820ebc3f1a10ef0
-
SHA1
c7d595d5c4471444c08d24a0ee7397ed89a660d8
-
SHA256
6b07bf02b8e12d40e40a385d99bed8318f370616d957643ba3ac4a8f31bbfdcd
-
SHA512
1477be095f6f5f75a51cf32140ce71adf8cefd31681e8a45a665ebee99ee3df3e157236feb3fbfbcac42124cd7c75ca650560b1a3717c2eca977abca8085eee2
-
SSDEEP
1536:ENjum7Ynydw8KwHpF73i6EBXlLOUpnIFIVplHezzEhAw:ENjum0ydDKqX0LOUpnIFsphePKAw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a98a9cfed4b48abc820ebc3f1a10ef0N.exe
Files
-
4a98a9cfed4b48abc820ebc3f1a10ef0N.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE