ElbF.pdb
Static task
static1
Behavioral task
behavioral1
Sample
XH4qdxHojXJKXSw.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
XH4qdxHojXJKXSw.exe
Resource
win10v2004-20240226-en
General
-
Target
b54372f21753dbb6413c90a07855d2c65164d1f1e4aafd67a74b667a1394401e
-
Size
628KB
-
MD5
bcb855b221df833260c3d96e3b4b8da7
-
SHA1
5b6435d57f8a8c8d238405af4862997d6881e229
-
SHA256
b54372f21753dbb6413c90a07855d2c65164d1f1e4aafd67a74b667a1394401e
-
SHA512
77f3c903fba26ddf5f50bb71d4a9d860d482d8e6f82a79c3c4c306ec3d8e3457bf9e9b7bb338f510f1db53d931ea3b1aec333e6b63ce29011002a37a19066357
-
SSDEEP
12288:dP0KaMvnpDb/OHTWVbrVDzaMHErTRl/LcgifgNqKNwFRHEEDngi:dP0KaupDTOHTWVPVDLmdlTcgWg08kHbh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/XH4qdxHojXJKXSw.exe
Files
-
b54372f21753dbb6413c90a07855d2c65164d1f1e4aafd67a74b667a1394401e.zip
-
XH4qdxHojXJKXSw.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 879KB - Virtual size: 878KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ