hBTU.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Scanned from a Xerox Multifunction Printer.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Scanned from a Xerox Multifunction Printer.exe
Resource
win10v2004-20231215-en
General
-
Target
fb0cb7be648be1da55541a362fc18c2c0285d061a0b59dca25d9bbda004f85f4
-
Size
674KB
-
MD5
0f7ad97551dd5156dc7cbeb2409da531
-
SHA1
835f159b739a37229a06cd48a41c66afbdffbefe
-
SHA256
fb0cb7be648be1da55541a362fc18c2c0285d061a0b59dca25d9bbda004f85f4
-
SHA512
18b761188ddd54f2824c3d3d6656cb24924f4a484a36aeb16e190bfd41c9d14871e9c855b25d27897cb903101278f49722e2d5bcbeb09537988abaa3951ded89
-
SSDEEP
12288:JI377qkTz2q6Lwn5vTcJJ+dCTtGY1kjU1NqFy6Dy7w8YqDCdv7Nbx6ni:JIL7qoz2q4wnKJSQGYN6l8w8bw9xj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Scanned from a Xerox Multifunction Printer.exe
Files
-
fb0cb7be648be1da55541a362fc18c2c0285d061a0b59dca25d9bbda004f85f4.zip
-
Scanned from a Xerox Multifunction Printer.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 709KB - Virtual size: 708KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ