userinit.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Virus.Win32.Parite.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Virus.Win32.Parite.exe
Resource
win10v2004-20241007-en
General
-
Target
Virus.Win32.Parite.a-093212a8b513b3962c8fb09874b986421f20e7688b0f52cc36dd51c2bfd8a14b
-
Size
198KB
-
MD5
c2bddf1267888276999fd959106c925e
-
SHA1
2f9fa834a434ef40b96c38f27ef0a58fa441c4bb
-
SHA256
093212a8b513b3962c8fb09874b986421f20e7688b0f52cc36dd51c2bfd8a14b
-
SHA512
ea66aa9f3ef136ccb7fe94f8647ee07ce37b52684da49922168eb7fb65d45315992caa302000d6eeed12f50903d4568cf47ed6d3d2af897a34e133bcf07e5eb4
-
SSDEEP
6144:+JbFm1G2sZhztcFFWtKch+BO10ol1sQA+W4H8myu74P:+mCZhztWUtPwOmol/j8Hj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Virus.Win32.Parite.a-093212a8b513b3962c8fb09874b986421f20e7688b0f52cc36dd51c2bfd8a14b
Files
-
Virus.Win32.Parite.a-093212a8b513b3962c8fb09874b986421f20e7688b0f52cc36dd51c2bfd8a14b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 332B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wtq Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE