XfbOZ.pdb
Static task
static1
Behavioral task
behavioral1
Sample
373b6c138897ab46738f2a8eedfa6a3d83d5186f4565514e9cd789cddc880062.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
373b6c138897ab46738f2a8eedfa6a3d83d5186f4565514e9cd789cddc880062.exe
Resource
win10v2004-20250217-en
General
-
Target
373b6c138897ab46738f2a8eedfa6a3d83d5186f4565514e9cd789cddc880062.exe
-
Size
1.0MB
-
MD5
fa4883ee6ff76b2325c56b3a09502ac7
-
SHA1
a56d1515a44a1c2c2275e5249c84d00ce3ee6005
-
SHA256
373b6c138897ab46738f2a8eedfa6a3d83d5186f4565514e9cd789cddc880062
-
SHA512
2bf3b6cfd91f9a524e8d86ad5329ccfe02f306bf04c2c5d6e4e135ff166e9d2d0a387ea4cae2c483113879b8a2b0d714b4bcec041a358d0511a3da7aa79c0c91
-
SSDEEP
12288:ayRokWawn5/azb7eQw/sOgi1b8LGK79aGGbpTcIsjX:jNKvSObIfRIg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 373b6c138897ab46738f2a8eedfa6a3d83d5186f4565514e9cd789cddc880062.exe
Files
-
373b6c138897ab46738f2a8eedfa6a3d83d5186f4565514e9cd789cddc880062.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ