HbaK.pdb
Static task
static1
Behavioral task
behavioral1
Sample
6482543e762d3e8c9edead98b17d5d75f3bd8b5bc70fdba981fe8c2a8d3faeef.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
6482543e762d3e8c9edead98b17d5d75f3bd8b5bc70fdba981fe8c2a8d3faeef.exe
Resource
win10v2004-20240508-en
General
-
Target
6482543e762d3e8c9edead98b17d5d75f3bd8b5bc70fdba981fe8c2a8d3faeef
-
Size
693KB
-
MD5
24df6b0b288dd964bb1e20c5e95fce45
-
SHA1
adfd87dfc79fabd6f48e02f3cb59a5be8f3dd6c7
-
SHA256
6482543e762d3e8c9edead98b17d5d75f3bd8b5bc70fdba981fe8c2a8d3faeef
-
SHA512
6547096b8f7ff6bda5e2f7153e6b6fbfebca94cb1bcbaa7a54c0d97d5f42e9a8941150b3b8690c6cd2c0a7c2273b53f0a0a406f93601f31d4d00ec9b4c7dc3f5
-
SSDEEP
12288:pTeH81jJU4QFXwZlsXjzoNkGB1i/56v4CnxAv3QpE3E1u1i37:c8MjwZlOjzoN/Q56wCniIpO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6482543e762d3e8c9edead98b17d5d75f3bd8b5bc70fdba981fe8c2a8d3faeef
Files
-
6482543e762d3e8c9edead98b17d5d75f3bd8b5bc70fdba981fe8c2a8d3faeef.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 690KB - Virtual size: 690KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ