ZNoh.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2b73e14598fa9527a5d3b18e34a2b263a4001785a862932005caad64025c86a3.exe
Resource
win7-20240708-en
General
-
Target
2b73e14598fa9527a5d3b18e34a2b263a4001785a862932005caad64025c86a3.xz
-
Size
564KB
-
MD5
4a77488f77ff4cd08acec0265f6db180
-
SHA1
e64925046e44599f4b1a65741a06610b89e36500
-
SHA256
2b73e14598fa9527a5d3b18e34a2b263a4001785a862932005caad64025c86a3
-
SHA512
4357f57dd6a3bdaa90f3988ae23ebc041453169f090bf9f48698c8d0d68dc740d8b792757031be560d1358def0d1ba165a17c5a52d39f416a08f55a937d8f593
-
SSDEEP
12288:WM2u8Hi1cqYuh4zUILeOO0B8Tz88RPyMaqAxfCWVd/KFBh:W+8mWV/WTzB4PQWeFBh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2b73e14598fa9527a5d3b18e34a2b263a4001785a862932005caad64025c86a3
Files
-
2b73e14598fa9527a5d3b18e34a2b263a4001785a862932005caad64025c86a3.xz.xz
-
2b73e14598fa9527a5d3b18e34a2b263a4001785a862932005caad64025c86a3.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 652KB - Virtual size: 651KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ