wHmn.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4a78c8f9b9321dd93c0e1c9e325271c434aa194d67e9d63b73c66c054d44049f.exe
Resource
win7-20240903-en
General
-
Target
4a78c8f9b9321dd93c0e1c9e325271c434aa194d67e9d63b73c66c054d44049f.exe
-
Size
586KB
-
MD5
01c879fb6063308d10f1958803f5633b
-
SHA1
691d2833dcc4a2a1f2e8f746f3f9bb5ceaf8cf33
-
SHA256
4a78c8f9b9321dd93c0e1c9e325271c434aa194d67e9d63b73c66c054d44049f
-
SHA512
f1fb9fef3108c04fa893111da8c4e52b893a22ddc4cc18f135774c04fe6f0b90e52a87fe251fe0d2f93df9a508dd4f1bdc687dbbe67103a919675cd87bd074de
-
SSDEEP
12288:U0nsD80+C/vmwf3PR7alWqgvZSmFiG92PfVGDr5Oi:3nR4/Zf57al1g192gDr5O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 4a78c8f9b9321dd93c0e1c9e325271c434aa194d67e9d63b73c66c054d44049f.exe
Files
-
4a78c8f9b9321dd93c0e1c9e325271c434aa194d67e9d63b73c66c054d44049f.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 583KB - Virtual size: 583KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ