c:\Users\F16\Documents\Visual Studio 2012\Projects\WindowsFormsApplication8\WindowsFormsApplication8\obj\Debug\WindowsFormsApplication8.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ad21777c9591c33b563a53115f9db9461899805dfe9c73a690463074fa9f12cfN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ad21777c9591c33b563a53115f9db9461899805dfe9c73a690463074fa9f12cfN.exe
Resource
win10v2004-20240802-en
General
-
Target
ad21777c9591c33b563a53115f9db9461899805dfe9c73a690463074fa9f12cfN
-
Size
128KB
-
MD5
13c2a0a9fbc1649da8c50ce26b292440
-
SHA1
958b633948884bebdaaec097495954ea181b5702
-
SHA256
ad21777c9591c33b563a53115f9db9461899805dfe9c73a690463074fa9f12cf
-
SHA512
efa1527c3c14934124299cea35f6b7822c2cf4ec04d8872b275f4e68370618c6323095df58a403cbd4d61866f8f8c7997da13ef42ab40f7e1caf8b63c5254648
-
SSDEEP
3072:H42ScHsJXC/Uij87CW70PX9akYAMTxLkwJgt1aedys9jjYLde:Y2SdcJDak9YxLVgueXx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad21777c9591c33b563a53115f9db9461899805dfe9c73a690463074fa9f12cfN
Files
-
ad21777c9591c33b563a53115f9db9461899805dfe9c73a690463074fa9f12cfN.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ