Static task
static1
Behavioral task
behavioral1
Sample
MoUsoCore.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
MoUsoCore.exe
Resource
win10v2004-20220414-en
General
-
Target
MoUsoCore.exe
-
Size
5.6MB
-
MD5
5d5bc970f975341558b8d2c225ca0115
-
SHA1
4f74826ed56cda233cfc12b86fd1b7da4a9f2e56
-
SHA256
902c65435b6b44cfda1156b0e7c6a30b2785fa4f2cbb9b1944a66f5146ec7aa5
-
SHA512
c7127326914dc4b793715a16e8d952ba38e87091d4be505c6bf45b4f4e918b82aa2b570554b79e69d4fe6352767deb411c132a5ac98db52026f98ef0652d9449
-
SSDEEP
98304:CKIozzakTtcqoK1IFSC/rDBzVcdHukUS+QcL0fshuYV20T5Hxc98OAbc3ORbiQVg:CWntq/vB+duicYfMuw5HSrAbsOr31v8
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx
Files
-
MoUsoCore.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 4.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5.6MB - Virtual size: 5.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE