Badman Injector.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1.19.30c.exe
Resource
win11-20240802-en
General
-
Target
1.19.30c.exe
-
Size
373KB
-
MD5
4479a0faf283e9e4823800a795de5da6
-
SHA1
4c8d6573a43d8e726888d95ca72bdb6a7c4677b2
-
SHA256
1945e967487029082203803df40dd0923078b51f7d3ed156bda9d0695fbe514e
-
SHA512
351ab2f301e6709e35463dc4e099dff213bc333ca57785df04c3e3e9bfb02e13f418ca0079c054f6833810b7434a875276c640cbd3599b2a22e2ed0818fb3f87
-
SSDEEP
6144:8cCfqvvh2rN8kPzV20uWLOHERN5Iau8Fxrbun0L+IS3MhhBNCyUnOiQAe8xhknLB:8Juh6ZzV20ggHhrK0L+IS3MhhBNCy0hS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1.19.30c.exe
Files
-
1.19.30c.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 243KB - Virtual size: 242KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 130KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ