C:\Users\Alliance\source\repos\startup\startup\obj\Debug\startup.pdb
Static task
static1
Behavioral task
behavioral1
Sample
startup.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
startup.exe
Resource
win10v2004-20240802-en
General
-
Target
startup.exe
-
Size
13KB
-
MD5
0ef97bc62145f6b04c131504572ef68a
-
SHA1
0504782738955e0fa9d9ae0260d3bdf274943e68
-
SHA256
4991f7095f91d73d627aab795f966d88741a49c91c88ad008e29cd32e6ec99d8
-
SHA512
ded0e6815e4d2b7a9cac03273f4bda969c3528fb52545f9527aba11edd7e7594ba75f02f20e3215d55d631cf94fb9f9a07f941f7828c6a121984f82581b8063e
-
SSDEEP
384:XUZElLbkdlbfE17ajVxfCcptYcFtVc03K:XoOLb77ajGotYcFtVc6K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource startup.exe
Files
-
startup.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ