F:\work\c#\WindowsFormsApplication5\WindowsFormsApplication5\obj\x86\Debug\WindowsFormsApplication5.pdb
Static task
static1
Behavioral task
behavioral1
Sample
cab1ea93577d68df7016ff9b67002afa473045289cc586a107eff52d7f7e85cfN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cab1ea93577d68df7016ff9b67002afa473045289cc586a107eff52d7f7e85cfN.exe
Resource
win10v2004-20240802-en
General
-
Target
cab1ea93577d68df7016ff9b67002afa473045289cc586a107eff52d7f7e85cfN
-
Size
1.2MB
-
MD5
142339ccdb55cfb2848049dfa674f3b0
-
SHA1
33363ee63ccfba51d4bc6df4ff030cd39dada1b5
-
SHA256
cab1ea93577d68df7016ff9b67002afa473045289cc586a107eff52d7f7e85cf
-
SHA512
fc472618c2aadb01c166512caf733be9c923671c92c34549ef15cbe9ab5c08da3216393fc3a2abe7212ff7722fb3595b21ff8fdd4bfb7a399b1fe789020c6b2d
-
SSDEEP
24576:G6u8znyca7HF+cLVb9iaRUKW07ZWURHKrFs1oRhv1G6jG:P+p7HF3RUKW07ZWURHKRLp1ty
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cab1ea93577d68df7016ff9b67002afa473045289cc586a107eff52d7f7e85cfN
Files
-
cab1ea93577d68df7016ff9b67002afa473045289cc586a107eff52d7f7e85cfN.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 86KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ