tTOn.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ee229e0094d512a8a9e8210e75ca4319384360113b541aa7a10ed301e0425830.exe
Resource
win7-20240903-en
General
-
Target
ee229e0094d512a8a9e8210e75ca4319384360113b541aa7a10ed301e0425830.exe
-
Size
678KB
-
MD5
519b9a9e52aa6e23736f01afa4001654
-
SHA1
dd28761acf65483cf2de998e93b9490afb27f196
-
SHA256
ee229e0094d512a8a9e8210e75ca4319384360113b541aa7a10ed301e0425830
-
SHA512
ab5444d71d20f010f1ff695baefcb43bbfe902f112a2cf077178a2772535854f8de56fa81c77bfb22af5972b377b2c89553ceb51702f15da411b4b9060f4f318
-
SSDEEP
12288:WHoc9jfIvg+0pYFFt8tLhCCIzOCXOqhGO1mPkNEKXD5p7iYYLM6ipxCbyUjU1zdL:Qzf/pYFwVXQOMOqhGPkN5T5pBYZwAWGU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ee229e0094d512a8a9e8210e75ca4319384360113b541aa7a10ed301e0425830.exe
Files
-
ee229e0094d512a8a9e8210e75ca4319384360113b541aa7a10ed301e0425830.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 676KB - Virtual size: 675KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ