otQUbEi.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a0bf1e896eb05794adf5797b217f280b6dde3e75ec0223232ea00731b88d3194.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a0bf1e896eb05794adf5797b217f280b6dde3e75ec0223232ea00731b88d3194.exe
Resource
win10v2004-20240412-en
General
-
Target
cb37f4ca84da54747cff9a45d36f6b09860f8b083adcd386b9bf005472e8525e
-
Size
676KB
-
MD5
f1aede40f33293faf7bd0277145231cb
-
SHA1
d964e90ccbe1cb1eaf11675d62c362b13f765461
-
SHA256
cb37f4ca84da54747cff9a45d36f6b09860f8b083adcd386b9bf005472e8525e
-
SHA512
507e49ea29612dc9f7663851ac5f190e16e44871d0ef018bb44fd8322a5370d04d2a608172e2081a5e8bbb104e33c66a57cfc272a2254e8e68e171689d9423be
-
SSDEEP
12288:jRlpI0aQS5Ld6XHSY/hIZo292ETsHlIgA4k7NWYsos7CgicAPLljg1Y:bpjZehqS8KTgryNWYsanZjg1Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/a0bf1e896eb05794adf5797b217f280b6dde3e75ec0223232ea00731b88d3194.exe
Files
-
cb37f4ca84da54747cff9a45d36f6b09860f8b083adcd386b9bf005472e8525e.zip
Password: infected
-
a0bf1e896eb05794adf5797b217f280b6dde3e75ec0223232ea00731b88d3194.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 709KB - Virtual size: 708KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ