XRhU.pdb
Static task
static1
Behavioral task
behavioral1
Sample
PO82107048.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
PO82107048.exe
Resource
win10v2004-20240426-en
General
-
Target
6757fdf010a7f13414a4d7285597b0b7b950d7766bdc591c87ab4176ec15a477.rar
-
Size
606KB
-
MD5
ff6ac6306f1c3b42d9554ff4af13c26f
-
SHA1
1487c174104dbe45b62825617a194ecb3f4fffe8
-
SHA256
6757fdf010a7f13414a4d7285597b0b7b950d7766bdc591c87ab4176ec15a477
-
SHA512
c6d5aaad9ea474fd5d1473d721bf9f017eb3922443540a3802c2f9b960486f61fd89b264a67337e76da2a5ee7dbb62d636d70c64d154ab90a0f5358de2cd7c05
-
SSDEEP
12288:R6J2FiKx7FWC4+fm7POhbbMvu4TIvvXI+qlaFT9L2I6PnPGGkP+j1pe295:gLKx7n4++7WpAvu4TIvvY+qAL2IAPPjB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/PO82107048.exe
Files
-
6757fdf010a7f13414a4d7285597b0b7b950d7766bdc591c87ab4176ec15a477.rar.rar
Password: infected
-
PO82107048.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 682KB - Virtual size: 681KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ