SNCx.pdb
Static task
static1
Behavioral task
behavioral1
Sample
INVOICE - MV CNC BANGKOK - ST24PJ-278.exe
Resource
win7-20240419-en
General
-
Target
INVOICE - MV CNC BANGKOK - ST24PJ-278.exe
-
Size
608KB
-
MD5
0559acbaacfcf93cefd8bcbfd498bfe4
-
SHA1
26142b0abd1848a4aeb96e63ed74836e5af67823
-
SHA256
251f9b9b5d35ad3ca96da825cea2a7b95f97872a5c6994a9123e203d41093a87
-
SHA512
e6ca8522526fcd0875d97ee1a77bcc3d11e78c6b72d7c2332331c59daae2bc2adb32ce6c803ebdaa27d4990575688acc09c6cca09664d419353f6f3ee848bcdd
-
SSDEEP
12288:yEJwtNcDfRDyLA7sGpEBVgWd/3cN1h89cdQpNIcaiwLjnp+YDj:lHfROLIsGUVD1cTh89BZaiQ7x/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource INVOICE - MV CNC BANGKOK - ST24PJ-278.exe
Files
-
INVOICE - MV CNC BANGKOK - ST24PJ-278.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 605KB - Virtual size: 605KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ