xLrw.pdb
Static task
static1
Behavioral task
behavioral1
Sample
65c7bcd5ea512d91fdcbc3f6cad89bc0bb67daf010f4be21f429a866978bd884N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
65c7bcd5ea512d91fdcbc3f6cad89bc0bb67daf010f4be21f429a866978bd884N.exe
Resource
win10v2004-20241007-en
General
-
Target
65c7bcd5ea512d91fdcbc3f6cad89bc0bb67daf010f4be21f429a866978bd884N.exe
-
Size
969KB
-
MD5
4f087cb99c652923ae7a73c899d57b20
-
SHA1
246ba498d03bd0a00b48d467242745bf0944f27e
-
SHA256
65c7bcd5ea512d91fdcbc3f6cad89bc0bb67daf010f4be21f429a866978bd884
-
SHA512
7b5e766c33388f92c3d3beeacbe28348d96f95858dd468105e3c23aea9abce64de85e4b49aa65706b6a232b87fce4094f9ec2e0c5132e9de9df342393cbef4c2
-
SSDEEP
24576:2TKj8QMHRGRkdVU5hgJGoYzdYzUKbrYVSEv3g2QutJCjKxe6dVJ0gA:sKj8QMYKdSyJG15YPOpJyKxe6dVJ0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 65c7bcd5ea512d91fdcbc3f6cad89bc0bb67daf010f4be21f429a866978bd884N.exe
Files
-
65c7bcd5ea512d91fdcbc3f6cad89bc0bb67daf010f4be21f429a866978bd884N.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 967KB - Virtual size: 966KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ