eFWu.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Ds1m7vqeVcwZRKF.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Ds1m7vqeVcwZRKF.exe
Resource
win10v2004-20240802-en
General
-
Target
Ds1m7vqeVcwZRKF.exe
-
Size
640KB
-
MD5
4a90f11d1d20d21bff2b39a6318323db
-
SHA1
c26d09b8004b6f9b1a3cbf9a1cf612f70344c0b6
-
SHA256
c33f479dbf220bcc94b3ec3b50291bcb563dd42be1c93f946b06d162ad913675
-
SHA512
c2cd0944c29216459797b06c6df9502402604a51c469e02d7383ad89399c7b792d60586781c71ada044a2456975f8561aa42258bc5477aa439283e5360fb9238
-
SSDEEP
12288:O6Fbylg0LO2zqsnelpU4DySbSDC2CrzQ2px4hiMEouh:Okag5w74HbIC2mwgMEnh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Ds1m7vqeVcwZRKF.exe
Files
-
Ds1m7vqeVcwZRKF.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 637KB - Virtual size: 637KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ