Bobo.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Objednávka_(PO208919)_Agropodnik_A.S_Trnava.exe
Resource
win7-20241010-en
General
-
Target
12022025_0653_Objednávka_(PO208919)_Agropodnik_A.S_Trnava.exe.iso
-
Size
266KB
-
MD5
f92abb2861ce41d7f23f45248d5f89e9
-
SHA1
db50fe92682c480e24d1c0ac6736434a62898c36
-
SHA256
f6b28caa545c754cd1c400bca51eecdda1a2ae017c5737320a359a61ed2d25f9
-
SHA512
c486bfd0cd85c7a639691e889f96579051f6c4dfaa3249e3fcb75d5980c2bd58921425ec101564a4fb8de3bc9c566b6a0ab328d5d4eed7db598c6521e1a2254f
-
SSDEEP
3072:+/hjZYOLYwIs9rLM2OXps4qlALF3r1u45Iymcwm6Upm/W6OEAmjc+e:2hjpLjG64D9j5Tb6wm/uEAmg+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Objednávka_(PO208919)_Agropodnik_A.S_Trnava.exe
Files
-
12022025_0653_Objednávka_(PO208919)_Agropodnik_A.S_Trnava.exe.iso.iso
Password: infected
-
out.iso.iso
Password: infected
-
Objednávka_(PO208919)_Agropodnik_A.S_Trnava.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 136KB - Virtual size: 135KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ