C:\Users\Administrator\Desktop\Client\Temp\RvzOfgtrwu\src\obj\Debug\NativeCppClassAttribute.pdb
Static task
static1
Behavioral task
behavioral1
Sample
94e7980b5d5669be8b9a317bae7e78c622541fae9091a7874a0f915b93cfd225.exe
Resource
win7-20240903-en
General
-
Target
ff4102bf366374a4e40b5ed903b35e3f2415b5653a3b5407b2993bad1061c957
-
Size
554KB
-
MD5
88ed9bd76c62e6076b724c62d9a0f1a6
-
SHA1
8ddbe99020df5b851bd82eaf9bb81890aa07f419
-
SHA256
ff4102bf366374a4e40b5ed903b35e3f2415b5653a3b5407b2993bad1061c957
-
SHA512
800a4a4d70010b498355ba986c7edfdcf36066f58cfae85d9612f39ed7a350bff608e2cf8f9354b1fa467075075a2c5967419153091e7e8a73e72d7ecd88e42a
-
SSDEEP
12288:oDDqUvdb+FV0+QQzFGUbHpyS5BcBhwObF02eeqbTUTr8Pq3KZ/P:oX3wFuwFvbHp/5BcBxF02eeqbT1SaZX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/94e7980b5d5669be8b9a317bae7e78c622541fae9091a7874a0f915b93cfd225.bin
Files
-
ff4102bf366374a4e40b5ed903b35e3f2415b5653a3b5407b2993bad1061c957.zip
Password: infected
-
94e7980b5d5669be8b9a317bae7e78c622541fae9091a7874a0f915b93cfd225.bin.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 595KB - Virtual size: 594KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ