Static task
static1
Behavioral task
behavioral1
Sample
CTM FOR MT. WOOJIN EVELYN.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
CTM FOR MT. WOOJIN EVELYN.exe
Resource
win10v2004-20220414-en
General
-
Target
384defabd1019ea4e734dd397b51659a8efb0384a0d4fe58bb3a1d6ae2ea7552
-
Size
424KB
-
MD5
6246ecae009741fb1b089c4db0747a99
-
SHA1
b275a18bc6ce38ba8a7f79457884a490bc06e246
-
SHA256
384defabd1019ea4e734dd397b51659a8efb0384a0d4fe58bb3a1d6ae2ea7552
-
SHA512
3345e856880ff4a87ecb7d82700a833bd684ac6ebf9c7938db1b969e6b0cf5271e783748c189b65c7e71e8f84804aea344215eb1be8687af26586b8968ae5e1d
-
SSDEEP
12288:4Rt8IkxiAnG0VkGaP7Uu+s7LOcf2H+vfVov:At8txiAncNjUu+sXOcfe+vfVov
Malware Config
Signatures
Files
-
384defabd1019ea4e734dd397b51659a8efb0384a0d4fe58bb3a1d6ae2ea7552.zip
-
CTM FOR MT. WOOJIN EVELYN.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 461KB - Virtual size: 461KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ