C:\Users\User\source\repos\WindowsApp1\WindowsApp1\obj\Debug\WindowsApp1.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8b103a00fbc87604c88d42e7fe05522bdfb1d2a2f50dfa395a9ade7c3f7442ce.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
8b103a00fbc87604c88d42e7fe05522bdfb1d2a2f50dfa395a9ade7c3f7442ce.exe
Resource
win10v2004-20241007-en
General
-
Target
8b103a00fbc87604c88d42e7fe05522bdfb1d2a2f50dfa395a9ade7c3f7442ce.exe
-
Size
11KB
-
MD5
498f96b5db1890dc06c35b8d64bab9ca
-
SHA1
0db2e0a9c96b61b6d093666dc12a935cbec0fbff
-
SHA256
8b103a00fbc87604c88d42e7fe05522bdfb1d2a2f50dfa395a9ade7c3f7442ce
-
SHA512
d48ae6179c2d22646bc0aa5aa8dfc986b11fa1ffc856719b953c2f21837a84a13585aecca7f5a6020081caea2159cac644f844f8bc94ebe39cff404b476e7add
-
SSDEEP
192:zUBrnLG6AgDbLcTsdUOkxF+QKwIW1YPno6HDa9/OYJ4DxYNlNKq:cjrvcToUPxF+QKdno6HDa9WMcwlNP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 8b103a00fbc87604c88d42e7fe05522bdfb1d2a2f50dfa395a9ade7c3f7442ce.exe
Files
-
8b103a00fbc87604c88d42e7fe05522bdfb1d2a2f50dfa395a9ade7c3f7442ce.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ