yQev.pdb
Static task
static1
Behavioral task
behavioral1
Sample
929167f47e1116759145eb457f86474a311374373b05b11438ea1222a9e2a8f0.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
929167f47e1116759145eb457f86474a311374373b05b11438ea1222a9e2a8f0.exe
Resource
win10v2004-20240802-en
General
-
Target
929167f47e1116759145eb457f86474a311374373b05b11438ea1222a9e2a8f0.exe
-
Size
915KB
-
MD5
0b18de9b2b7f17fc93796eabee8d26dd
-
SHA1
0c0f08a2df8262960e6290900bff0684847cc0c8
-
SHA256
929167f47e1116759145eb457f86474a311374373b05b11438ea1222a9e2a8f0
-
SHA512
07a146051648b7bf1a7024bf1375b27b3ee6ea07c9c455ede24d3edce26d79e2f227a9b1a9ba0eb4f5e05c75e458169e48c3a8a1acaf731781a0f105ace37860
-
SSDEEP
12288:OdK2wPfKaoFsNyjcFg/Q5P4Uf1fTX5muSPflsEXywds31GHvMb7d+fLnnjnU+DL:FPfKaKsNEesQ5PxL5mjHiwOFEvMOPn3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 929167f47e1116759145eb457f86474a311374373b05b11438ea1222a9e2a8f0.exe
Files
-
929167f47e1116759145eb457f86474a311374373b05b11438ea1222a9e2a8f0.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 912KB - Virtual size: 912KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ