D:\dbs\el\omr\Target\x64\ship\postc2r\x-none\perfboost.pdb
Static task
static1
Behavioral task
behavioral1
Sample
6de50f4068f945e93ef7a74afc7b2a5c5358ec28e2121d5beec8a3ef56d2e547.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6de50f4068f945e93ef7a74afc7b2a5c5358ec28e2121d5beec8a3ef56d2e547.exe
Resource
win10v2004-20241007-en
General
-
Target
6de50f4068f945e93ef7a74afc7b2a5c5358ec28e2121d5beec8a3ef56d2e547
-
Size
493KB
-
MD5
b2d242a584a6aeec9eae1f6db6585ebe
-
SHA1
cc22ca1f3b047a59f493e1aaa7768de6a9524d02
-
SHA256
6de50f4068f945e93ef7a74afc7b2a5c5358ec28e2121d5beec8a3ef56d2e547
-
SHA512
4285330f7b0e4f19ccf745545d9e27d88451a94b12ff783f413656a701b554b476f81691378545339ae09cf87695deade8a3f3f1c0f2ea0819f0a28358374c6d
-
SSDEEP
6144:NDEuPBUwM2UdYpbiuCpoPQB5224sM9SjkWm8fohT2JkJ:NDsqpbiuCp8Ws/sQSjC8fox
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6de50f4068f945e93ef7a74afc7b2a5c5358ec28e2121d5beec8a3ef56d2e547
Files
-
6de50f4068f945e93ef7a74afc7b2a5c5358ec28e2121d5beec8a3ef56d2e547.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 218KB - Virtual size: 217KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 230KB - Virtual size: 230KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.didat Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 512B - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.c2r Size: 512B - Virtual size: 156B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ