c:\rje\tg\bj\Release\ojc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
388b0503b4740d936d51792a0773c9fbebf576b5b266e49225aad1a8ab127c43.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
388b0503b4740d936d51792a0773c9fbebf576b5b266e49225aad1a8ab127c43.exe
Resource
win10v2004-20240802-en
General
-
Target
388b0503b4740d936d51792a0773c9fbebf576b5b266e49225aad1a8ab127c43
-
Size
310KB
-
MD5
3c4e18ea8d6a07100fe406629cf8e4c7
-
SHA1
079c6611192d72f1050b7307f1f0b1385321a439
-
SHA256
388b0503b4740d936d51792a0773c9fbebf576b5b266e49225aad1a8ab127c43
-
SHA512
0d493fde423e21d0db93281f3d72abde2f3125ce877fcd9995e4aad0c55f9c9eca79b0dff47741853817128880e93d3f35ea195a190dd065d628a8605de54922
-
SSDEEP
6144:QhsiIR80XG+rN20BLUbP9u4BtfSMjulMyB9SvAcwqe:2KXBo6LaPYOta+aaJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 388b0503b4740d936d51792a0773c9fbebf576b5b266e49225aad1a8ab127c43
Files
-
388b0503b4740d936d51792a0773c9fbebf576b5b266e49225aad1a8ab127c43.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 308KB - Virtual size: 307KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ