C:\Users\Neferty\Downloads\Quasar-master\Quasar-master\Images\Muck-Crypter-FUD-AES-Algoritm-main\Muck-Crypter-FUD-AES-Algoritm-main\wininires\obj\Debug\winini.pdb
Static task
static1
Behavioral task
behavioral1
Sample
641b0af72c3a8335e70a37943ba6323dcdb910aea7d2ac4f0425e7f14a9e634c.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
641b0af72c3a8335e70a37943ba6323dcdb910aea7d2ac4f0425e7f14a9e634c.exe
Resource
win10v2004-20240802-en
General
-
Target
641b0af72c3a8335e70a37943ba6323dcdb910aea7d2ac4f0425e7f14a9e634c
-
Size
3.1MB
-
MD5
2892266b396b334f56c6c495ce0202d6
-
SHA1
9dcad83d43584b15bd7a584b8f7f59b58a32280c
-
SHA256
641b0af72c3a8335e70a37943ba6323dcdb910aea7d2ac4f0425e7f14a9e634c
-
SHA512
215f8f186110cc34db003aa58bfff6287cbd1310e53c14d55e33ddae867f5ebc4a805c8dc1b1cf1e58280301a28e349555005776ee45a3b95dc1f9f509f940c6
-
SSDEEP
98304:+pJMM7Twa11tXEc5s0KUdnGmXw43qriCDs6IXKcW:+Xga1ot0i43qZDcXM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 641b0af72c3a8335e70a37943ba6323dcdb910aea7d2ac4f0425e7f14a9e634c
Files
-
641b0af72c3a8335e70a37943ba6323dcdb910aea7d2ac4f0425e7f14a9e634c.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ