d:\again\SharpDevelop Projects\RInjector\Virus.win32RozbehStrike\obj\Debug\Nominatus_ToxicBattery.pdb
Static task
static1
Behavioral task
behavioral1
Sample
82a208e77252373007e6f79c762d425880880248d34e296a99403a505b0d1e01N.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
82a208e77252373007e6f79c762d425880880248d34e296a99403a505b0d1e01N.exe
Resource
win10v2004-20240802-en
General
-
Target
82a208e77252373007e6f79c762d425880880248d34e296a99403a505b0d1e01N
-
Size
4.4MB
-
MD5
969d8ebe46550d8e17285750ac991920
-
SHA1
8a0a763d10c230d4727b8bc4924b809cadae3b83
-
SHA256
82a208e77252373007e6f79c762d425880880248d34e296a99403a505b0d1e01
-
SHA512
0c60a2989045d853fb73afb00be7af061112d290b33f7355175a3b53a469626fb730e8cac9b7a9c9d2313fdca3d3ef11e15ca079aca909c894bf4f4c61e9100e
-
SSDEEP
6144:w9t1m9t1m9t1m9t1m9t1m9t1m9t1m9t1m9t1m9t1m9t1m9t1m9t1m9t1m9t1m9tf:qIIIIIIIIIIIIIIIIIIIIIIIIIIII
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82a208e77252373007e6f79c762d425880880248d34e296a99403a505b0d1e01N
Files
-
82a208e77252373007e6f79c762d425880880248d34e296a99403a505b0d1e01N.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ