C:\qatKillMitygrowehemad{\cuthaJailPyinRocknatauhmmodell\Blamsisophioyowoweensawltedavo.pdb
Static task
static1
Behavioral task
behavioral1
Sample
eaf516ce064085f2961fab62a5cee0d777c57dd39a9758863b0bc67acae8a3c8.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eaf516ce064085f2961fab62a5cee0d777c57dd39a9758863b0bc67acae8a3c8.exe
Resource
win10v2004-20241007-en
General
-
Target
eaf516ce064085f2961fab62a5cee0d777c57dd39a9758863b0bc67acae8a3c8
-
Size
198KB
-
MD5
4c6b54c4c8974dbad7f1daf6d1b92f93
-
SHA1
b8b6b5fef98375bbf338b2280534e82d9dce6796
-
SHA256
eaf516ce064085f2961fab62a5cee0d777c57dd39a9758863b0bc67acae8a3c8
-
SHA512
64f28a198054f6c720ef013e1fad9527496212a8c6590af66d13d9712950da646b1def4106a4bbfd07483e0ab0c376a89124b4511d22e45c3f141b74ed2570f0
-
SSDEEP
3072:bUz9W2R0fdo7XIlnjIl+AIs0uQwQsS7+li0FysRyvVDDRrs+eqQ:KWRdo7XIlnjUAjZ70ExztQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eaf516ce064085f2961fab62a5cee0d777c57dd39a9758863b0bc67acae8a3c8
Files
-
eaf516ce064085f2961fab62a5cee0d777c57dd39a9758863b0bc67acae8a3c8.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Exports
Exports
SetSemaphoreW@8
IncrementThreadW@4
FindProjectW@12
Sections
.text Size: 158KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.psikif Size: 1024B - Virtual size: 676B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Tide Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ