rTcV.pdb
Static task
static1
Behavioral task
behavioral1
Sample
AWB 3486458032.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
AWB 3486458032.exe
Resource
win10v2004-20240802-en
General
-
Target
ab6d8098362fbff87de3eb5dfb63eb568c37706660a2dbaa627f95bb8602acae
-
Size
852KB
-
MD5
56296a8a0dfbfd87015d81ffdb20f676
-
SHA1
11609bb643ef19ac1156fd2ac140342275ec7a47
-
SHA256
ab6d8098362fbff87de3eb5dfb63eb568c37706660a2dbaa627f95bb8602acae
-
SHA512
5e38527273663727f25e8439be4d920c81206e503a782898fef863b0ee7215b7c3b269ff2a345b0baf5344392655331435a34143d7ca9f95b3ee510c625056c0
-
SSDEEP
12288:D5KQhls6kBTFXkQmLpDUB5UemyO8sNyxvY8LS4E6UW55s81j2qWdz8oIyS:DXfrklF0DN0uT2fS4UKn16q2PtS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/AWB 3486458032.bat
Files
-
ab6d8098362fbff87de3eb5dfb63eb568c37706660a2dbaa627f95bb8602acae.zip
-
AWB 3486458032.bat.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 1007KB - Virtual size: 1006KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ