C:\Users\attationin\Documents\projects\Patrick-Crypter-Update\Patrick-Crypter-Stub\Patrick-Crypter-Stub\obj\Release\net4.6-windows\WinFormApp.pdb
Static task
static1
General
-
Target
Ligma External V2.exe
-
Size
500KB
-
MD5
4c37dff47ac4417752743c6d5c69fe13
-
SHA1
76a38503b063e32fe1b6f71ea1fa3fc893720c2c
-
SHA256
731d4b22f29c65b5a450e89c7e4072e793a668d1b84d98d0191971616530fdcf
-
SHA512
8b9372bfa80248e5364dd0d73a83b04a160eef1a9844bf340943da9250cabcedbb0c81f87db2541b53ec1a27760d23db35009205b1a22591995f0cf35c9b641a
-
SSDEEP
12288:OREkD5DFr/cp9gxh/xiAa5HLL4UYUdcpc3RrC2Hpf2NNeji:OR1vUbXJ4Nmi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Ligma External V2.exe
Files
-
Ligma External V2.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 367KB - Virtual size: 366KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ