c:\users\zain\documents\visual studio 2012\Projects\WindowsApplication35\WindowsApplication35\obj\Debug\WindowsApplication35.pdb
Static task
static1
Behavioral task
behavioral1
Sample
bca1a5ae15dcd96a52275f594fc5dd6a9727414c7a1b0fc91b09aaa306ea2d57.exe
Resource
win10-20240404-en
General
-
Target
bca1a5ae15dcd96a52275f594fc5dd6a9727414c7a1b0fc91b09aaa306ea2d57.zip
-
Size
40KB
-
MD5
d9a91b5468a67ca954ca6a91084c69bd
-
SHA1
8aceea2f7a42f1dbe57982a2adf8a71f4f81844c
-
SHA256
b1fcd3eda30600436aeea23653892d86895c10901a8123ec088644a93669c52b
-
SHA512
9c5019dc8849a1c2868a7b22f2ac6634579c9cdbdcae6147876cf890f49bfdf6ad309ba28a0e8b48a5d699b8bd759230474e5b13c45924888ba8d7284da39dae
-
SSDEEP
768:tmf0n3qxFqR0/4Eo5+Caq9hSNQ66w2Zk7M900O0INUFuhr:Ef0n6KM6JZk7M9Q038hr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/bca1a5ae15dcd96a52275f594fc5dd6a9727414c7a1b0fc91b09aaa306ea2d57.exe
Files
-
bca1a5ae15dcd96a52275f594fc5dd6a9727414c7a1b0fc91b09aaa306ea2d57.zip.zip
Password: infected
-
bca1a5ae15dcd96a52275f594fc5dd6a9727414c7a1b0fc91b09aaa306ea2d57.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 139KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ