C:\Users\Administrator\Desktop\Client\Temp\QCrzDJnvZX\src\obj\Debug\Entry.pdb
Static task
static1
Behavioral task
behavioral1
Sample
MX-M502N_201145.exe
Resource
win7-20240903-en
General
-
Target
a27e114718882462365354f0763277e39d19cbfc4711f35dfd03816c463fda98
-
Size
993KB
-
MD5
ab49de6be19baeef6becc24bf27e0b8a
-
SHA1
a4738185440da8cc13b0a08fb74916a52c8c75d5
-
SHA256
a27e114718882462365354f0763277e39d19cbfc4711f35dfd03816c463fda98
-
SHA512
a0874dfd4ffb7c1e03decd1219bd76868362b5b160b0af0fb053c2ac48ff66332b200d000b1f1205954c008d15f5ec01cf21222071ad5640bbbf670edac5d609
-
SSDEEP
24576:8FllvWCEbZYnBBinOi9OUFFV9TXhTA8Ul1Dg+Z628aIy5gYXJj0wEiATdUtC:eloCCZYn3sOirFV9TXhTAXl1D9Z6KgYQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/MX-M502N_201145.bin
Files
-
a27e114718882462365354f0763277e39d19cbfc4711f35dfd03816c463fda98.zip
Password: infected
-
MX-M502N_201145.bin.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 991KB - Virtual size: 991KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 179KB - Virtual size: 179KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ