NpPL.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ce113e073aa8b0c405170b4f9ba6f422fbf8e56719a2a9bc4e80c0c27a0df178.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
ce113e073aa8b0c405170b4f9ba6f422fbf8e56719a2a9bc4e80c0c27a0df178.exe
Resource
win10v2004-20250313-en
General
-
Target
ce113e073aa8b0c405170b4f9ba6f422fbf8e56719a2a9bc4e80c0c27a0df178.exe
-
Size
645KB
-
MD5
478b6c127c58d123d508bf3b3185696f
-
SHA1
aecc93d11885333d596b5e20df398221a1a5cbe5
-
SHA256
ce113e073aa8b0c405170b4f9ba6f422fbf8e56719a2a9bc4e80c0c27a0df178
-
SHA512
7bbb2e1d7ebf02a9f9c18389cdd2dba6b078ce18dca7f78b924d889e0e62e2e87bbbe4caecc4e96c5b6ed4a6da80fc3dc520e88b1e5b5e8ffad70a74c7629c71
-
SSDEEP
12288:NEzMjvOn6nzxSRmNTFukoanGP+IEAk2Gv4f3asfBSwAg1Xz:6Ij2n6n4ENoP6NKamBSAt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce113e073aa8b0c405170b4f9ba6f422fbf8e56719a2a9bc4e80c0c27a0df178.exe
Files
-
ce113e073aa8b0c405170b4f9ba6f422fbf8e56719a2a9bc4e80c0c27a0df178.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 632KB - Virtual size: 632KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ