C:\Documents and Settings\1134\My Documents\Visual Studio 2008\Projects\Image Worm Stub\Image Worm Stub\obj\Release\IWStub.pdb
Static task
static1
General
-
Target
Image Worm Server.exe
-
Size
23KB
-
MD5
0ddc9f94d5d5ada8ebe270d9fd4977ef
-
SHA1
98fdab7e1f342e10f8b55b57d5bf29d5bbcd05ff
-
SHA256
4e2df8fc24776df2b89b58fd477c076a1a973508ae07f14613794e9bdbbb4c29
-
SHA512
cefcb8bf3b907eee43513171d326459afd557ad9e34a7ea47c8b7f7cb45ad08a0fea14c7efff2f39ed02236dcc68089b4f12738f56ef7de34d62b1db05dffe3b
-
SSDEEP
384:x479fq/Cp/BDdmo6W40sxnjFSLf45iXQfB01L8wCZ6NCzYcCeaiwLgC5/:W79emJdmo6WSROFmZ6kzYcCea1Lg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Image Worm Server.exe
Files
-
Image Worm Server.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 179B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ