xRWl.pdb
Static task
static1
Behavioral task
behavioral1
Sample
DOC_Supply list_.exe
Resource
win7-20240903-en
General
-
Target
ccee66709794608159101a5e7682c0dc.bin
-
Size
720KB
-
MD5
780756d2d4273049231d2da1211a3151
-
SHA1
9fa31e4e0f06f71edf75c7af185d333ff1762d94
-
SHA256
d7968f2adedcbabbdf6714d3408d8c06707b14440ad540710040e77417b16d4f
-
SHA512
6d55a383843a1759a4fd6a6715d1f2615522232b3fb9852e1fa0edb035e11b100a2c4a0a7a72317e7b052a579d6ee4dcd9ee5b43c0073f74351f0620d420a3af
-
SSDEEP
12288:BN+KK5jGWBLFnqLeQ1c2EkpiZ6I3ouPSCUJerygmy2UIx5/WChWOIhWb5:BN+KK5LBLFqLekiZ634fCeUy2L/WKWOR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/DOC_Supply list_.exe
Files
-
ccee66709794608159101a5e7682c0dc.bin.zip
Password: infected
-
9bb53721ebe6645710a2fae7352da97fcd7cd5f259bc0fd957c7bd157b191f96.rar.rar
Password: infected
-
DOC_Supply list_.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 773KB - Virtual size: 773KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ