iBhL.pdb
Static task
static1
Behavioral task
behavioral1
Sample
PR 2000052255.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
PR 2000052255.exe
Resource
win10v2004-20231215-en
General
-
Target
ada96be07fde9b5e9df03982f6fa5069.bin
-
Size
750KB
-
MD5
6df1ce729010c4b6fb63d45d2d24347d
-
SHA1
a47a3ebbc8e19083f7f1b0cfa03df23e94d271df
-
SHA256
b6e4bd24a338f84707f9f89185640202384e059ea78cbf98c80400de85361a6d
-
SHA512
7885f31bebbcd7ec37eb78c922b7841e6eae8b4f5843ae1fc5cfdfd9420a185399bcf48203d51831d9094f852e7e723ada4115482933621f19152ba5dd846726
-
SSDEEP
12288:Myi8L6XmI94VGCdLEsJEmqZEc3AbGceYgsqH61EWNeWgPP9bf1xVdzt9Z:MLfXm3VGQ4gEmqyc6GcC61EGPgnJfVjL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/PR 2000052255.bat
Files
-
ada96be07fde9b5e9df03982f6fa5069.bin.zip
Password: infected
-
f1451016ce66fc229dcad2d77dd2fbade2fdd7b1bedd1ea4adb6de62b8a165e5.7z.rar
Password: infected
-
PR 2000052255.bat.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 776KB - Virtual size: 776KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ