C:\Users\FR34K\AppData\Local\Temporary Projects\זצלזגיפדץץגהגהף\obj\Debug\זצלזגיפדץץגהגהף.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2757cb1d516aca0487074d0ec72ec62782d110db8b8e9c89e65362e6772517c9.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2757cb1d516aca0487074d0ec72ec62782d110db8b8e9c89e65362e6772517c9.exe
Resource
win10v2004-20241007-en
General
-
Target
2757cb1d516aca0487074d0ec72ec62782d110db8b8e9c89e65362e6772517c9.exe
-
Size
297KB
-
MD5
e7019b9470a3429ed56932e348a16b28
-
SHA1
518b13eba11c699b053f45e5316d5cbbe3d346b8
-
SHA256
2757cb1d516aca0487074d0ec72ec62782d110db8b8e9c89e65362e6772517c9
-
SHA512
8bf818148e4dc084494e36fcb52c27df00237dd40f5c6171b56c1d78d334e636a317f3d8589c7889ca77478585eac06a8c9c50c82749f409a08fa9f1ef7583e7
-
SSDEEP
1536:SRtvbvk5KQCMvxl96lONCyCqU+lKeUd026bLG+TLWQrQkZWSdR:+aCMvx6wNCyCsHG+J5R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 2757cb1d516aca0487074d0ec72ec62782d110db8b8e9c89e65362e6772517c9.exe
Files
-
2757cb1d516aca0487074d0ec72ec62782d110db8b8e9c89e65362e6772517c9.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 294KB - Virtual size: 294KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ