D:\Protected\Project\BinderStub\BinderStub\obj\x86\Release\BinderStub.pdb
Static task
static1
Behavioral task
behavioral1
Sample
648e8c17040772e7d1a0e68e6b047094dac07fd4ca5ff69cd6a829d7f5bda859.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
648e8c17040772e7d1a0e68e6b047094dac07fd4ca5ff69cd6a829d7f5bda859.exe
Resource
win10v2004-20240802-en
General
-
Target
648e8c17040772e7d1a0e68e6b047094dac07fd4ca5ff69cd6a829d7f5bda859
-
Size
158KB
-
MD5
967bb84a55e43d7a0c1cfdde14cd25a8
-
SHA1
281469a894ae5f7453e37eff6e991b3c7f284058
-
SHA256
648e8c17040772e7d1a0e68e6b047094dac07fd4ca5ff69cd6a829d7f5bda859
-
SHA512
f1053c565811545e960f306c232d86d2212b5478f8be8b00955226177fa9dc810932710cbb0f5b46dcc8aa15e0654164849fb417a40b035b798a9f043900c722
-
SSDEEP
3072:3H9weO6K59WGqqgFFfuTsPfCjqPaBNamOPy:XW19W9MtL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 648e8c17040772e7d1a0e68e6b047094dac07fd4ca5ff69cd6a829d7f5bda859
Files
-
648e8c17040772e7d1a0e68e6b047094dac07fd4ca5ff69cd6a829d7f5bda859.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ