C:\Users\Lamouri\Documents\visual studio 2012\Projects\WindowsApplication4\WindowsApplication4\bin\Debug\Obfuscated\WindowsApplication4.pdb
Static task
static1
Behavioral task
behavioral1
Sample
NoThreatDetectedd0e3b116f6704f67f375d2fa41a841339f4d0efdf835ad8c167883ac238c16faN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
NoThreatDetectedd0e3b116f6704f67f375d2fa41a841339f4d0efdf835ad8c167883ac238c16faN.exe
Resource
win10v2004-20240910-en
General
-
Target
NoThreatDetectedd0e3b116f6704f67f375d2fa41a841339f4d0efdf835ad8c167883ac238c16faN
-
Size
107KB
-
MD5
be2b89ec678cf36895a192c4055750e0
-
SHA1
962af823ee68e3c44ed1d481b9975132237d6799
-
SHA256
d0e3b116f6704f67f375d2fa41a841339f4d0efdf835ad8c167883ac238c16fa
-
SHA512
1ab299d036535fcbcf5dbb8ccf1472568099d3ff3cc14f4f61b1f312e9c4d41810ee8004cc04bdf444d6898ceef0d16b757f2185e1ba56a132ef1ec45619a930
-
SSDEEP
1536:2ACAY03YP1mk8TR7Xe3+LhSNJFU01kJBI5MSC63s38tbPpiHhm:ZY0q1mk8S3+Lh2OSt3FT4Hhm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NoThreatDetectedd0e3b116f6704f67f375d2fa41a841339f4d0efdf835ad8c167883ac238c16faN
Files
-
NoThreatDetectedd0e3b116f6704f67f375d2fa41a841339f4d0efdf835ad8c167883ac238c16faN.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 94KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ