zrvE.pdb
Static task
static1
Behavioral task
behavioral1
Sample
27336a02b8be0e210cae46d680509f78bff16d64f653925b55a11cc837341eea.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
27336a02b8be0e210cae46d680509f78bff16d64f653925b55a11cc837341eea.exe
Resource
win10v2004-20240802-en
General
-
Target
27336a02b8be0e210cae46d680509f78bff16d64f653925b55a11cc837341eea.exe
-
Size
703KB
-
MD5
d48a40e1ebe635d7368017c6fe020f09
-
SHA1
3c66aa4de1f6d27f5ac9c01eae8f92bda4ba2417
-
SHA256
27336a02b8be0e210cae46d680509f78bff16d64f653925b55a11cc837341eea
-
SHA512
d0c8e024c3ed345b2a1dead2d524c93b04da95ea41dbbd7c2f7e1114def9440f9308918366e0febec22b385aece156dc1853b7f71fbe7cb82cbfa9e89ada3a56
-
SSDEEP
12288:9dOsd0DUdUAum4zaLLp/Jy+ft1be4qcWsAXxcnrC/bZQMglIMw5:Csd0IdT4GLFxy+lIpD6uNoIt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27336a02b8be0e210cae46d680509f78bff16d64f653925b55a11cc837341eea.exe
Files
-
27336a02b8be0e210cae46d680509f78bff16d64f653925b55a11cc837341eea.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 700KB - Virtual size: 699KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ