sdmQ.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c51201337af75df4850b5392117e54eedfa2f1ac133e891947ece8102cdda0d0.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
c51201337af75df4850b5392117e54eedfa2f1ac133e891947ece8102cdda0d0.exe
Resource
win10v2004-20241007-en
General
-
Target
c51201337af75df4850b5392117e54eedfa2f1ac133e891947ece8102cdda0d0.exe
-
Size
951KB
-
MD5
cdb36d7e12b4b09cc17a4acb15abcb32
-
SHA1
22bac6bed40f58042c26c64f27fa6d1ba62bdf8b
-
SHA256
c51201337af75df4850b5392117e54eedfa2f1ac133e891947ece8102cdda0d0
-
SHA512
2cdb43718de629e69a93e1ac138747d2550bf2a1a56bc265c19837171067d843a4aed83b6c95d04488b15cbd2a80b07c9f4412e5b787507575e09d333912b909
-
SSDEEP
12288:/CfiaKJpEBPqhqZELFu0Hy52/aSMlon8NyPtGKN5VV2WJ9oaTXJmBupazmbME:/YitEsFS5+aSmoeyVG+V90OkswzSp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource c51201337af75df4850b5392117e54eedfa2f1ac133e891947ece8102cdda0d0.exe
Files
-
c51201337af75df4850b5392117e54eedfa2f1ac133e891947ece8102cdda0d0.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 948KB - Virtual size: 947KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ