applaunch.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f0f10e87620061512881f7d1647e0c3a2b775b0d22d23546acbefb3a33679818N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f0f10e87620061512881f7d1647e0c3a2b775b0d22d23546acbefb3a33679818N.exe
Resource
win10v2004-20241007-en
General
-
Target
f0f10e87620061512881f7d1647e0c3a2b775b0d22d23546acbefb3a33679818N
-
Size
7.2MB
-
MD5
0ca9da5b7ed035951a7ada1191fb16e0
-
SHA1
1f233ac8da48b8f2f196a0ec476608c9bee15892
-
SHA256
f0f10e87620061512881f7d1647e0c3a2b775b0d22d23546acbefb3a33679818
-
SHA512
651d49c4b9ed76b78d4dbf5339f0618782b464d96a664553addbfcd24709083f9bd3d834c028b83794acb3ea62178516958f4fa26913f0d358dc0e6c841db950
-
SSDEEP
98304:KvDll1vDllq2om1qfRzMcOe8tnIlcKTwGxHOx5saTAGRI:KvDll1vDllLom1qfP+aCGxHOx5saTAGW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0f10e87620061512881f7d1647e0c3a2b775b0d22d23546acbefb3a33679818N
Files
-
f0f10e87620061512881f7d1647e0c3a2b775b0d22d23546acbefb3a33679818N.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ