eRpW.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Sigmanly_4023f16ab570c96bbfc7d6c9685d137382c82029c15df71696acdc20023dd31b.exe
Resource
win7-20240903-en
General
-
Target
Sigmanly_4023f16ab570c96bbfc7d6c9685d137382c82029c15df71696acdc20023dd31b
-
Size
678KB
-
MD5
acd4b8a4942027c60549e8adb8195727
-
SHA1
b92a0256ced0778c1892e4f7457679e9dcf626db
-
SHA256
4023f16ab570c96bbfc7d6c9685d137382c82029c15df71696acdc20023dd31b
-
SHA512
529cf1b995f99cfaf439f10cba7def41bf72f6290f107558511988acfdfde9c68f6f5cfb96b329abf99066b30e64a48b0698a014a388233103f4003285a3604b
-
SSDEEP
12288:mQTPphPpFk6TzS+rlapC/BdEZaPe/jS/9JZZDnWlnlDlDkSI6UWeK4:rhPpF+elU6BdYu1JrWllxkl6P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Sigmanly_4023f16ab570c96bbfc7d6c9685d137382c82029c15df71696acdc20023dd31b
Files
-
Sigmanly_4023f16ab570c96bbfc7d6c9685d137382c82029c15df71696acdc20023dd31b.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 676KB - Virtual size: 675KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ