Static task
static1
Behavioral task
behavioral1
Sample
MAFR-GVK-.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
MAFR-GVK-.exe
Resource
win10v2004-20230220-en
General
-
Target
MAFR-GVK-.exe
-
Size
24.4MB
-
MD5
e7e2d5af3555a8c4e9e8ef0912c0c511
-
SHA1
92b188a780d394ad3601ac61e951344072d392ae
-
SHA256
29c8d504b259328abff6cabf44c08f502fc9bc082de4425fb867a0b004397d44
-
SHA512
9f70c52cbddeb58a30ad4fd76fa0e2bd32d398fd37aa044bcc20573289b4a1e2377a86c83d1efeb98a61a192d166309e4e36f740063c28950124fb6d32e366d1
-
SSDEEP
49152:c+gha2L3FMbCyDhf+Dn3i/FISxmB243SlQIFYvs8dRzTpnzs:c+g+FhfMn3EmW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource MAFR-GVK-.exe
Files
-
MAFR-GVK-.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 24.3MB - Virtual size: 24.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ