henL.pdb
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
e06817ec3e144f7aa91773c9f6df1cb66fea5c5aaa224875582bbbe0e95063df.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e06817ec3e144f7aa91773c9f6df1cb66fea5c5aaa224875582bbbe0e95063df.exe
Resource
win10v2004-20241007-en
General
-
Target
e06817ec3e144f7aa91773c9f6df1cb66fea5c5aaa224875582bbbe0e95063df
-
Size
709KB
-
MD5
a9b9eec5ecbfd819e5d21eca58f269d9
-
SHA1
163e1389e710852e7a30e30e7265773e82ecb6e6
-
SHA256
e06817ec3e144f7aa91773c9f6df1cb66fea5c5aaa224875582bbbe0e95063df
-
SHA512
834edf8a3cf8a718a526298b8ec563403c7c692a177e3fe82ec4ce0ecaa9d2cdf27b94899052cc21a13638ba77cad44fb7e3d10da1e1316e3e08bca48ffdf36a
-
SSDEEP
12288:4nwDKbummwOiGFImZg/1Fz3hFf94BFJJDff7ZRo+:4nwDKb+w1mZaCJJLf3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e06817ec3e144f7aa91773c9f6df1cb66fea5c5aaa224875582bbbe0e95063df
Files
-
e06817ec3e144f7aa91773c9f6df1cb66fea5c5aaa224875582bbbe0e95063df.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 706KB - Virtual size: 706KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ