d:\again\SharpDevelop Projects\RInjector\Virus.win32RozbehStrike\obj\Debug\Nominatus_ToxicBattery.pdb
Static task
static1
Behavioral task
behavioral1
Sample
73b37c90cc831b25b4c8405e42d041b282de13e8dab0cc0d9cbd9f228260ad84N.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
73b37c90cc831b25b4c8405e42d041b282de13e8dab0cc0d9cbd9f228260ad84N.exe
Resource
win10v2004-20241007-en
General
-
Target
73b37c90cc831b25b4c8405e42d041b282de13e8dab0cc0d9cbd9f228260ad84N
-
Size
1.9MB
-
MD5
bf1b8f702d67ecb998ee273406332f20
-
SHA1
c493a99aa0e74ec7ad2c51bcb1c14ee9cbb71644
-
SHA256
73b37c90cc831b25b4c8405e42d041b282de13e8dab0cc0d9cbd9f228260ad84
-
SHA512
32e2447943ab019e46584be6da9c97440bed9e0d8609250751efd3d3673430f8b109ac7fb75541502034d1eae29917fbb0c7cd218373f7c0b5f98e9e376dc0f8
-
SSDEEP
24576:qIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIQ:
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73b37c90cc831b25b4c8405e42d041b282de13e8dab0cc0d9cbd9f228260ad84N
Files
-
73b37c90cc831b25b4c8405e42d041b282de13e8dab0cc0d9cbd9f228260ad84N.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ