D:\Projects\AndrewKeepCoding\WinUI3Localizer\WinUI3Localizer\obj\Release\net7.0-windows10.0.19041.0\WinUI3Localizer.pdb
Static task
static1
Behavioral task
behavioral1
Sample
07cc370bfcfc9469492bf51dc77e44e0N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
07cc370bfcfc9469492bf51dc77e44e0N.dll
Resource
win10v2004-20240802-en
General
-
Target
07cc370bfcfc9469492bf51dc77e44e0N.exe
-
Size
108KB
-
MD5
07cc370bfcfc9469492bf51dc77e44e0
-
SHA1
7933d07e5f6f742e5ff216c7b913eea46715f553
-
SHA256
83f6878edb485ebe3e5c994c1d18c8cf4ba57db707031d7e7364fe180aaf6c43
-
SHA512
da837a60ffdf3085a35024f059b2c895031c6256dc56782311a21c51eb9c1ad5d0693f608545f003bff242f07f55e88e367e71e2282cc39df8dc5415eae43815
-
SSDEEP
3072:6/5mSyNE5r/bY+G/nqwM73/Nk+22CZQNvQaFlxJuUbHN:dqSaFnN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07cc370bfcfc9469492bf51dc77e44e0N.exe
Files
-
07cc370bfcfc9469492bf51dc77e44e0N.exe.dll windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Sections
.text Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 844B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ