WRBN.pdb
Static task
static1
Behavioral task
behavioral1
Sample
CATALOGUE2024.GBLTD.exe
Resource
win7-20240903-en
General
-
Target
62ae14d3dd02e1b12d50084d22ca02ada727f525de08f77ed932deb7d1db7f01
-
Size
969KB
-
MD5
b2a8e67cfd31a6e87eec14124749652e
-
SHA1
6b31fa8adca73dfff6ed66164d583b21707302b9
-
SHA256
62ae14d3dd02e1b12d50084d22ca02ada727f525de08f77ed932deb7d1db7f01
-
SHA512
ac5f4d674369057458dc78a8f460f3e822760c080052e07569dec43d375263a07faa7ec28b817ee8661d25d9a3afac849f0fe8ccb141655402ee0edc497ffb7b
-
SSDEEP
24576:IiWiBxDrVBPcI02raqSLqntMLEVlTlv0EPKv43lYS+dhc5:XnyqSLqtMusA04IdE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/CATALOGUE2024.GBLTD.bat
Files
-
62ae14d3dd02e1b12d50084d22ca02ada727f525de08f77ed932deb7d1db7f01.zip
-
CATALOGUE2024.GBLTD.bat.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ