D:\dbs\el\omr\Target\x86\ship\postc2r\x-none\setlang.pdb
Static task
static1
Behavioral task
behavioral1
Sample
debfed8d4b0413c83ed0f94dd0e61fb6afbccaf7cfd085d667ceb07fc2fcb725.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
debfed8d4b0413c83ed0f94dd0e61fb6afbccaf7cfd085d667ceb07fc2fcb725.exe
Resource
win10v2004-20241007-en
General
-
Target
debfed8d4b0413c83ed0f94dd0e61fb6afbccaf7cfd085d667ceb07fc2fcb725
-
Size
53KB
-
MD5
1911ae41b33836a4fc493d77fc704d88
-
SHA1
2d371a1e354c847140c9c8c91b35b1420a510e3f
-
SHA256
debfed8d4b0413c83ed0f94dd0e61fb6afbccaf7cfd085d667ceb07fc2fcb725
-
SHA512
4cb55d71576c49323318d9a9fef451c38e1e163d356c47603488b8ed808d14e33db5cfb364a13563fde4c5753fff9cfe9eaa7a252dbe3370c0a2c3c4921ad7fe
-
SSDEEP
768:EvsiBoj7yvOS8qwdvHWN+14JRTUamNK75Rp0tw:RLavOS8H2NnbTUawK75Rp0tw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource debfed8d4b0413c83ed0f94dd0e61fb6afbccaf7cfd085d667ceb07fc2fcb725
Files
-
debfed8d4b0413c83ed0f94dd0e61fb6afbccaf7cfd085d667ceb07fc2fcb725.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c2r Size: 512B - Virtual size: 320B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ