D:\Slichice\Hakovanje\[2010] Hakovanje\Ecryption\S-Norton3\obj\x86\Release\S-Norton3.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e9d55c4331c35c96310b5958b105c9ac27c5be848e01e55b12f9b4dc0cd252c4N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e9d55c4331c35c96310b5958b105c9ac27c5be848e01e55b12f9b4dc0cd252c4N.exe
Resource
win10v2004-20241007-en
General
-
Target
e9d55c4331c35c96310b5958b105c9ac27c5be848e01e55b12f9b4dc0cd252c4N
-
Size
1.3MB
-
MD5
815fe391b1f0021e5167e4590f1bfb60
-
SHA1
8b3910b95231b6a09dcb90b22afc6466e47b1451
-
SHA256
e9d55c4331c35c96310b5958b105c9ac27c5be848e01e55b12f9b4dc0cd252c4
-
SHA512
bcf59d2f0c87f46a127db4589d033e4aea04bfc11d50d24f967286ddb7c15f4afce2b1b5f9d22aca70902cc62c1f1be72cba24a123e7801c6cb9389d1bd60fff
-
SSDEEP
24576:umyRuH2ivDHnx4sM8xu9JUFMuXzJa24yRuH2ivDHnx4sM8xu9JUFMuXzJa2BL4A7:4RuHpVZM8xurUFM8aYRuHpVZM8xurUFP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9d55c4331c35c96310b5958b105c9ac27c5be848e01e55b12f9b4dc0cd252c4N
Files
-
e9d55c4331c35c96310b5958b105c9ac27c5be848e01e55b12f9b4dc0cd252c4N.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 141B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 881KB - Virtual size: 881KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ