fTB.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4b0172ec49e672667d9b9ce4ff5ea0365ce29118728adeda23e5c21e7e170ba6.exe
Resource
win7-20240903-en
General
-
Target
4b0172ec49e672667d9b9ce4ff5ea0365ce29118728adeda23e5c21e7e170ba6.exe
-
Size
580KB
-
MD5
082d39cfd34b71fcbcd6fde04630a9da
-
SHA1
0158f6fc8b93a002d854eeea2a67fc1e6cae6781
-
SHA256
4b0172ec49e672667d9b9ce4ff5ea0365ce29118728adeda23e5c21e7e170ba6
-
SHA512
10b9f414c84e95acd51225e600cf8b36627832986cf01cb5864bf134755546cae5db24f86b60a9364214d140f7761670b7ee67819d7b0519e7de3f9173461fbe
-
SSDEEP
12288:8zJGCGrsE1JwH6lWGs6jwt4IRBFGJgoUo1ID7BPQ:8zMCYsE12HSWGWt42Gmm16B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b0172ec49e672667d9b9ce4ff5ea0365ce29118728adeda23e5c21e7e170ba6.exe
Files
-
4b0172ec49e672667d9b9ce4ff5ea0365ce29118728adeda23e5c21e7e170ba6.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 577KB - Virtual size: 576KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ