ODkkbTm.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2369c0f2028ebc10f12c923fda0e97715c246ddbb0698b3379c5e6b403188879.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2369c0f2028ebc10f12c923fda0e97715c246ddbb0698b3379c5e6b403188879.exe
Resource
win10v2004-20231215-en
General
-
Target
2369c0f2028ebc10f12c923fda0e97715c246ddbb0698b3379c5e6b403188879.exe
-
Size
745KB
-
MD5
8a944460181bc7450e02a40c14eb8833
-
SHA1
2c92ae1e51efea2fd46e9274a0a2e19c8f214d4a
-
SHA256
2369c0f2028ebc10f12c923fda0e97715c246ddbb0698b3379c5e6b403188879
-
SHA512
f21a9045b18c7c2741aab440038db43e2a519513770d7ac02b4d179b4afb27f0d5ae5e2236d2c595646d118cecfe6d931fc99f24790ca25d48a2b1ed4605b435
-
SSDEEP
12288:3SqEIqkzqHKMbj18vVWw1cdSFVX1hzpGNTzmFG5v6p7MVvXOa3GX6MZI8ddwf+Xi:38IJz87bh8vVV1ciVzzp6uF46+fOa3G2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2369c0f2028ebc10f12c923fda0e97715c246ddbb0698b3379c5e6b403188879.exe
Files
-
2369c0f2028ebc10f12c923fda0e97715c246ddbb0698b3379c5e6b403188879.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 743KB - Virtual size: 742KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ