TakP.pdb
Static task
static1
Behavioral task
behavioral1
Sample
08fb8aced61061bdab4e9ae5598330cf1f2506a0c162c27757abe4e03ba0540b.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
08fb8aced61061bdab4e9ae5598330cf1f2506a0c162c27757abe4e03ba0540b.exe
Resource
win10v2004-20250129-en
General
-
Target
08fb8aced61061bdab4e9ae5598330cf1f2506a0c162c27757abe4e03ba0540b.exe
-
Size
626KB
-
MD5
ddd641b5c419c9c5e2f0fa08a7283c48
-
SHA1
12cd0e878c37cf2c45b8b6de894fc84ef732c4d1
-
SHA256
08fb8aced61061bdab4e9ae5598330cf1f2506a0c162c27757abe4e03ba0540b
-
SHA512
2932b0fe66e2a8e5acd211d8572c4b1e9b9df96f9e1f26c6b791a5ff0fff07b2b53e95eee0fd95a0496ac2abffaaf8c5d910f897d15b93d596fc4c84e651f5f2
-
SSDEEP
12288:8BLZWa+kWXtyaLm1WhuF57d9hFZdfRkdpCtESwf6bpGNU:DkayaLbqFTZtQpAtma
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08fb8aced61061bdab4e9ae5598330cf1f2506a0c162c27757abe4e03ba0540b.exe
Files
-
08fb8aced61061bdab4e9ae5598330cf1f2506a0c162c27757abe4e03ba0540b.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 620KB - Virtual size: 620KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ