hKvi.pdb
Static task
static1
Behavioral task
behavioral1
Sample
50a42bf60a37c5ffc7039e53d644d7c2a61506ba5f9628f21a55a10a9ea98e1f.exe
Resource
win7-20240903-en
General
-
Target
50a42bf60a37c5ffc7039e53d644d7c2a61506ba5f9628f21a55a10a9ea98e1f.exe
-
Size
698KB
-
MD5
f353045626c8a74548823aa66e667a38
-
SHA1
bec1cf4e79f56dc15d2be6938550c58e018c4a51
-
SHA256
50a42bf60a37c5ffc7039e53d644d7c2a61506ba5f9628f21a55a10a9ea98e1f
-
SHA512
9d0fa7b9c3395cf85a4a32f9aa53165ede4dfe285c566fe7452db7069c51b2a3863c8b533c035c43b9b1ce9d7e6c2f89ae52b7d86fbf5aa1ca4acf315ccc56c5
-
SSDEEP
12288:vnCObAX9ku5iJeAZWm5t/wVu00E9TUQShAF5vSj6UQjNGe3ICMo0mE:TI93A0m5t/suDE91EC5v/UQYdhUE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 50a42bf60a37c5ffc7039e53d644d7c2a61506ba5f9628f21a55a10a9ea98e1f.exe
Files
-
50a42bf60a37c5ffc7039e53d644d7c2a61506ba5f9628f21a55a10a9ea98e1f.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 696KB - Virtual size: 695KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ