d:\dbs\el\oc\target\x86\ship\postc2r\x-none\clview.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1199a1dc6d5b00b87aa02d55eff5ba9351499cea6512c84a8ac577da2cb13334.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1199a1dc6d5b00b87aa02d55eff5ba9351499cea6512c84a8ac577da2cb13334.exe
Resource
win10v2004-20241007-en
General
-
Target
1199a1dc6d5b00b87aa02d55eff5ba9351499cea6512c84a8ac577da2cb13334
-
Size
2.5MB
-
MD5
6d0c7a91be0a31b0cbdae11314b7c8b0
-
SHA1
2e574703e020f194a0c6b2e919c9473a414c90ba
-
SHA256
1199a1dc6d5b00b87aa02d55eff5ba9351499cea6512c84a8ac577da2cb13334
-
SHA512
1b5c6bd1b21ccadb9de6a62ec2f03a492c1a5c742f9e6e2082110779fd7edae6440e5e38710f93d4cb795cc405da51600bc913506063016c727a5ea7fe228e67
-
SSDEEP
49152:xS5C+R2zNsnKvkTgXuquveY+W2o8oT3ezMrl9cekcHhXh9HJUiWUXsmqsqzl87aE:xz+RYNAKvkTgXuquveY+W2o8oT3ezMrt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1199a1dc6d5b00b87aa02d55eff5ba9351499cea6512c84a8ac577da2cb13334
Files
-
1199a1dc6d5b00b87aa02d55eff5ba9351499cea6512c84a8ac577da2cb13334.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 170KB - Virtual size: 170KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c2r Size: 512B - Virtual size: 280B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ