C:\Users\tmc\Documents\Visual Studio 2015\Projects\WindowsServices\nohost.exe\obj\Debug\nohost.exe.pdb
Static task
static1
Behavioral task
behavioral1
Sample
48b1024f599c3184a49c0d66c5600385265b9868d0936134185326e2db0ab441.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
48b1024f599c3184a49c0d66c5600385265b9868d0936134185326e2db0ab441.exe
Resource
win10v2004-20240802-en
General
-
Target
48b1024f599c3184a49c0d66c5600385265b9868d0936134185326e2db0ab441
-
Size
4KB
-
MD5
0e83b186a4d067299df2db817b724eb7
-
SHA1
1e24f6dfdcfac543d89e6e4ee8f2d9fc4321f264
-
SHA256
48b1024f599c3184a49c0d66c5600385265b9868d0936134185326e2db0ab441
-
SHA512
c54ee66880683331b0739094b85fbb9af58dc214e64a4de22dbf50e8b5b713986a147db8f1b6ea8db2b74ae986fcd37fcf6dd67994d43f9e9d989f8ea67305f1
-
SSDEEP
48:64j9vTTxuNwMMXfDlwH+tdMmZWP+6VlXH6W/6Lf6cF2pfbNtm:JTjfDWe/vWfl9XzNt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48b1024f599c3184a49c0d66c5600385265b9868d0936134185326e2db0ab441
Files
-
48b1024f599c3184a49c0d66c5600385265b9868d0936134185326e2db0ab441.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ