Static task
static1
Behavioral task
behavioral1
Sample
Device/HarddiskVolume3/Opt-Share/CustomerService/XHARE/x Ateeb/OPT LicenseGenerator/LicenseGenerator.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Device/HarddiskVolume3/Opt-Share/CustomerService/XHARE/x Ateeb/OPT LicenseGenerator/LicenseGenerator.exe
Resource
win10v2004-20230220-en
General
-
Target
LicenseGenerator v1.2.exe
-
Size
40KB
-
MD5
eb09ba863360e7f6ee1bb9e986ba1b26
-
SHA1
3648fb7ed693a8db9cffe106efeb33e63c5bde21
-
SHA256
eee089d8004efa965723143673e641ff0c2feb9cba63f96b3f1d73228075dee8
-
SHA512
1c9d1df9e08aeb07e48fa75a6e025aee7c1d991c008b2b4037ba669267c5fbeaf833616df804c817376797c2d4cb39e797eff7cdfc229a91ca2ed308594de7d8
-
SSDEEP
768:NOhRkXOlhs3txS89YqZJ1Ma4y80o35c5Al5gZzw3IkSHLbY0V4M0d2p:NOhi+lm3tJYqn4yu35c5AXg6fSrXV4Pu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Device/HarddiskVolume3/Opt-Share/CustomerService/XHARE/x Ateeb/OPT LicenseGenerator/LicenseGenerator v1.2/LicenseGenerator v1.2.exe
Files
-
LicenseGenerator v1.2.exe.zip
Password: ow&b!54X6x_#4gT@9BT4
-
Device/HarddiskVolume3/Opt-Share/CustomerService/XHARE/x Ateeb/OPT LicenseGenerator/LicenseGenerator v1.2/LicenseGenerator v1.2.exe.exe windows x86
Password: ow&b!54X6x_#4gT@9BT4
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
qFkGlWz Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
manifest.json