Doks.pdb
Static task
static1
Behavioral task
behavioral1
Sample
SSA6780987654E3E45678.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
SSA6780987654E3E45678.exe
Resource
win10v2004-20250129-en
General
-
Target
SSA6780987654E3E45678.exe
-
Size
681KB
-
MD5
d3dc338f15c05a7802cf5fd556ddfedd
-
SHA1
096c4b01b40cd27353560a97636cd81ec12c44f4
-
SHA256
5b34f76345fe3155d491e7362fbed7f9c7463499a90e5d7c3e2bc4e8924021f0
-
SHA512
183f0431dfaca48201bf27012de88409d530677c7afe56b08d00e2f32b8d9183d9d67113b02b72a8c0f89e85e8d1e75168d9dae0117b320904381ed4eba83fb9
-
SSDEEP
12288:Cyfe6wy8qYAwjrY+7NmIKaljDf7WhcjYoXP8B6slRIpF:CyfelBTAsN7NFXWhdoXZsRGF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SSA6780987654E3E45678.exe
Files
-
SSA6780987654E3E45678.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 679KB - Virtual size: 678KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ