C:\Users\cxrne\OneDrive\Рабочий стол\PakCryptPatchTool\obj\Debug\PakCryptPatchTool.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3543dc3d8486ea31cf4ad58912d7b9d98a4b67f893ee53a9974b0f7674d75270N.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3543dc3d8486ea31cf4ad58912d7b9d98a4b67f893ee53a9974b0f7674d75270N.exe
Resource
win10v2004-20241007-en
General
-
Target
3543dc3d8486ea31cf4ad58912d7b9d98a4b67f893ee53a9974b0f7674d75270N
-
Size
7KB
-
MD5
626e180625e6100385b75bbf515e39e0
-
SHA1
9004a03b6c23cc62e09868fb24c0ca68830c0891
-
SHA256
3543dc3d8486ea31cf4ad58912d7b9d98a4b67f893ee53a9974b0f7674d75270
-
SHA512
c6565659b727b3ea8891b404f49758d570bd73bb3b1805c3d1f1b3e854b1f7956b3b4a1894918c2c338f0057ff2e4294ba572ace564be46d6879a2532432a279
-
SSDEEP
96:gOUsPZ/V6dht3Pb1U9y58We7jiMHF+6ba7aV7ntlN3IzNt:gtoZAdht3P2AeyMHF+naV7tvK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3543dc3d8486ea31cf4ad58912d7b9d98a4b67f893ee53a9974b0f7674d75270N
Files
-
3543dc3d8486ea31cf4ad58912d7b9d98a4b67f893ee53a9974b0f7674d75270N.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ