C:\Users\Administrator\Desktop\2023CryptsDone\DynamicLayout\obj\Debug\haragon_.pdb
Static task
static1
Behavioral task
behavioral1
Sample
XeonV1.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
XeonV1.exe
Resource
win10v2004-20241007-en
General
-
Target
XeonV1.exe
-
Size
55KB
-
MD5
27cf43587e38d4f262ae7324d09db221
-
SHA1
746ef1082175139efadd9316cbd2bb98e5c6b41e
-
SHA256
241795ffe4c6263f79c969214c7f2ff712ff1209bacd823e1423700ab8e0c841
-
SHA512
db0ea94dbfeda5c3eeff2c7e1f8d7a5e22a55b55fce9cf30b3a96795b0b185713ab64d16bc74d8bcc2f26ff13cc97dddcf9fa5613e1f2343a8609d81b60ba0d9
-
SSDEEP
768:oBFKm7cEFqzf0nQ5K++6TOAOCZ8vLDVr6Ypa2AvzKt3Df2UAG6F:oBFN7Szf1YlEOnCCvLp1pGC3D+UAGO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource XeonV1.exe
Files
-
XeonV1.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ