yxmG.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e57c8f7816b977274bc947ad634d5571ea1214e3a8950c5480250b46d5649e79.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e57c8f7816b977274bc947ad634d5571ea1214e3a8950c5480250b46d5649e79.exe
Resource
win10v2004-20241007-en
General
-
Target
e57c8f7816b977274bc947ad634d5571ea1214e3a8950c5480250b46d5649e79
-
Size
741KB
-
MD5
41bf67688c5d58f536ebb1e27d51b50e
-
SHA1
cc661142c6397d38e969b34fadd4f71d094d86b0
-
SHA256
e57c8f7816b977274bc947ad634d5571ea1214e3a8950c5480250b46d5649e79
-
SHA512
7fb60b14826f7c4f5a330441a06e9e1a4726f0e142f3bdb7fe0abccc59a76047d004ef7d1b21a90bc72540db546aa853433ce4838068352c597ebb2a7ebbd746
-
SSDEEP
12288:a2LbWa+kkFv6re6vkrIRlFgyVSTh15UilAkUAGSkaAlduLJ:gk+v6rec2KEyVW1ZUAIpCJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e57c8f7816b977274bc947ad634d5571ea1214e3a8950c5480250b46d5649e79
Files
-
e57c8f7816b977274bc947ad634d5571ea1214e3a8950c5480250b46d5649e79.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 735KB - Virtual size: 735KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ