Static task
static1
Behavioral task
behavioral1
Sample
REQN No. ABL-S205044A.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
REQN No. ABL-S205044A.exe
Resource
win10v2004-20220414-en
General
-
Target
a0076bc42cef10bb43891f58ad785c80176f3d1306e99bef3531b48841034173
-
Size
507KB
-
MD5
41c9e4cf03d1b90ea66ff24ab759733f
-
SHA1
444c12f8116b1b7626ae39e27003304590208212
-
SHA256
a0076bc42cef10bb43891f58ad785c80176f3d1306e99bef3531b48841034173
-
SHA512
f2ec82bc5cd1c158b380533239f75426e68ba5fe13df8ea905d37f0ba49d0ba36e11ddf8cced031407bade5ef6faaf46d1d8c0cb376284053d2b84b57e6ac930
-
SSDEEP
12288:ZhOKvwHmJ57Q0TU3mTlBBkH2bRjyzvQTjLhkI9gNUhuj:vO5mJ57Q0T9TlBBc2bRmzWVph8
Malware Config
Signatures
-
CoreCCC Packer 1 IoCs
Detects CoreCCC packer used to load .NET malware.
Processes:
resource yara_rule static1/unpack001/REQN No. ABL-S205044A.exe coreccc
Files
-
a0076bc42cef10bb43891f58ad785c80176f3d1306e99bef3531b48841034173.rar
-
REQN No. ABL-S205044A.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 528KB - Virtual size: 528KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ