C:\Users\Admin\Desktop\EksjöDataFixarn\nyaste antivirus\Virustotal\obj\x86\Debug\EksjöDataFixarn Anti-malware.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a16f2371e7db825833996325479e78e8d37e131e531ab8bebd17e82d09c5c964N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a16f2371e7db825833996325479e78e8d37e131e531ab8bebd17e82d09c5c964N.exe
Resource
win10v2004-20240802-en
General
-
Target
a16f2371e7db825833996325479e78e8d37e131e531ab8bebd17e82d09c5c964N
-
Size
456KB
-
MD5
262dee06bc835cd445faa8123381be30
-
SHA1
d600938d13e3991166063b7ee7395e48b5e69fe1
-
SHA256
a16f2371e7db825833996325479e78e8d37e131e531ab8bebd17e82d09c5c964
-
SHA512
f2cc26e6ebff1aa9a75c75316b8caf8ff2d59488bc201d2d48ace4b2d8ed6f654c226614800db0d4a922abcfe563aade862cc19578b5f14426209b090515d890
-
SSDEEP
12288:IGmTbwAKKshdUvdEIZ9+7QhwEd+Cgx5Nq2yWVkCgJr0QQemX7:IJT0THE62MgdLSkH0QQemX7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a16f2371e7db825833996325479e78e8d37e131e531ab8bebd17e82d09c5c964N
Files
-
a16f2371e7db825833996325479e78e8d37e131e531ab8bebd17e82d09c5c964N.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 449KB - Virtual size: 448KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 168B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ