Z:\Zelo\Franchise\Chrt.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e4eb7df40b92437c33978e491edde2a73a1095e6b7c7518c37c9a88451a15e17N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e4eb7df40b92437c33978e491edde2a73a1095e6b7c7518c37c9a88451a15e17N.exe
Resource
win10v2004-20241007-en
General
-
Target
e4eb7df40b92437c33978e491edde2a73a1095e6b7c7518c37c9a88451a15e17N
-
Size
104KB
-
MD5
19dd82c29149a24dd1fa5b686cb433a0
-
SHA1
5c3aa23299bfc994651bd71cd0175d5ffb7f55a2
-
SHA256
e4eb7df40b92437c33978e491edde2a73a1095e6b7c7518c37c9a88451a15e17
-
SHA512
faf2084e71fb7bb1caf386d4bf1b86b2f551d7e3ecbb18aa47ae6a4e65b6eddb70432588bb7d0ae5f5ffeff7b16d3cd6e1507106bfa16c35c1ee394da2c0872d
-
SSDEEP
3072:Cp6O7TfIDxjStV3op19tYsTseeee++Zmx:CXLIDx23o39t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e4eb7df40b92437c33978e491edde2a73a1095e6b7c7518c37c9a88451a15e17N
Files
-
e4eb7df40b92437c33978e491edde2a73a1095e6b7c7518c37c9a88451a15e17N.exe windows:5 windows x86 arch:x86
728912aafd5f6683cceafad85b8ab632
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcrt
abs
_isctype
user32
GetNextDlgGroupItem
UnloadKeyboardLayout
GetActiveWindow
EqualRect
UnionRect
kernel32
FindResourceW
CompareStringA
GetConsoleOutputCP
InitializeCriticalSection
Exports
Exports
colorpix
?adjustRectLuma@@YGEUdrivenumberA@@PR
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.esap Size: 512B - Virtual size: 206B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.adata Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.case Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ