C:\Users\damia_de0etcp\Desktop\logon\obj\Debug\logon.pdb
Static task
static1
Behavioral task
behavioral1
Sample
logon.exe
Resource
win11-20240802-en
General
-
Target
logon.exe
-
Size
1.2MB
-
MD5
c219ad7d9def48b4d6bed4f537a67a7a
-
SHA1
6eaa6cc9a512cfe0646189b25468d49b53cf5e31
-
SHA256
990ef02a532386038a073692f213a15974748c5a6782d3c8ebd4b7d7e1d2aa7a
-
SHA512
35df3b99d023f7836216d46cb4750d783de60def701b50b904aeef18d5e7a9b1317467c7bd4429a1923a6ad662285340513d59cf66aced4b83aa0eb259ccd8b7
-
SSDEEP
24576:5DMGuWCsRXWk24/uLXfkwYY0ihs9yxm9QymThCiK1XvzpqPUp6hFw:5wGu8RXWxfLfVYY0Us9diyRXXVqPUqa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource logon.exe
Files
-
logon.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ