iZrLDnG.pdb
Static task
static1
Behavioral task
behavioral1
Sample
RDF 803809-2024.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
RDF 803809-2024.exe
Resource
win10v2004-20231222-en
General
-
Target
c5793613219a782eb08205921a3f9ed97c2c74de18e0cd36008046d1a5e1288e.cab
-
Size
919KB
-
MD5
ad45748672878683e5a4bb38e41a583d
-
SHA1
aa644941c54bf7e76ff20ba6fc208c176ed865a0
-
SHA256
c5793613219a782eb08205921a3f9ed97c2c74de18e0cd36008046d1a5e1288e
-
SHA512
f24e98cefb297e3bd3c7b4b1860e9b10885e0bfb94bc8f4e22136f3fd4e86b8e1b6dbdbb4d735c3d55e1470d57f9ab26fbda922bed097e7525ef7929f336f799
-
SSDEEP
12288:jiNoy9RjcEpxqKOZSjxfLbOOfUTYUayDtyD1TwwHFQHL6tH4jKJuPul34Va4X2tW:WNNDpMS9fOOftRD+wlCL2YOJZl3o+a2O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/RDF 803809-2024.exe
Files
-
c5793613219a782eb08205921a3f9ed97c2c74de18e0cd36008046d1a5e1288e.cab.cab
-
RDF 803809-2024.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 926KB - Virtual size: 925KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ