NnLj.pdb
Static task
static1
Behavioral task
behavioral1
Sample
42db38678ebdd31dbcab40014ff3b96a8b263f77e8484901226defbdfbb8eba6.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
42db38678ebdd31dbcab40014ff3b96a8b263f77e8484901226defbdfbb8eba6.exe
Resource
win10v2004-20241007-en
General
-
Target
42db38678ebdd31dbcab40014ff3b96a8b263f77e8484901226defbdfbb8eba6.exe
-
Size
614KB
-
MD5
e25b8037dca1fdb8e69cb26bd1cb4f17
-
SHA1
5a05ef1979ba60a139cb987e7ab3abf1115acba8
-
SHA256
42db38678ebdd31dbcab40014ff3b96a8b263f77e8484901226defbdfbb8eba6
-
SHA512
24e783563daf3595dc341c080103976c1a9303f1e7a40418581e5abbb88ace04c341217c7d165e6f36fccd2800108efe454fb6a7acca127a1f8de8b0e2b7f4c1
-
SSDEEP
12288:UnCgemEOtMBeSoLZTglM5L/O9PVRcVyZIPaCby:qlEj2LZd0tSVjby
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42db38678ebdd31dbcab40014ff3b96a8b263f77e8484901226defbdfbb8eba6.exe
Files
-
42db38678ebdd31dbcab40014ff3b96a8b263f77e8484901226defbdfbb8eba6.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 611KB - Virtual size: 611KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ