c:\rje\tg\bj\Release\ojc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
7451a7613a173ab1c80d664892cb744c7f09925dedf9adb964b31861b74cb713.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
7451a7613a173ab1c80d664892cb744c7f09925dedf9adb964b31861b74cb713.exe
Resource
win10-20240404-en
General
-
Target
7451a7613a173ab1c80d664892cb744c7f09925dedf9adb964b31861b74cb713
-
Size
1.9MB
-
MD5
ae85198b4e96994847b851ba2360a2e5
-
SHA1
7b0217e10e74c3d20d46b776c64f49e81dc8d8f2
-
SHA256
7451a7613a173ab1c80d664892cb744c7f09925dedf9adb964b31861b74cb713
-
SHA512
ce58b0f4faaa79266679c767b5e03f1990f822bfc81286e99bd8a0890bc1b07c9740ce65cb08ca6380e6ba285dffe97f00748d46ddfee1e1fb00bf135fc1071d
-
SSDEEP
49152:XPlJjt7Z2v0GKAivgCuB70kMhO2SD+/3jwtRd0vnQiC:XNJhS0GKAivgZ70xOxwcPd0IiC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7451a7613a173ab1c80d664892cb744c7f09925dedf9adb964b31861b74cb713
Files
-
7451a7613a173ab1c80d664892cb744c7f09925dedf9adb964b31861b74cb713.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ