Static task
static1
Behavioral task
behavioral1
Sample
Pearl10.exe
Resource
win10-20230220-en
General
-
Target
Pearl10.zip
-
Size
1.0MB
-
MD5
3beb8a77b20ea4465c940eb45d6a8976
-
SHA1
8f788794fe9f791a5afdb03695d980160e13ad0f
-
SHA256
9f76ddbf18c8d8230dd768d55aad7a5d75f374c536d1f4ff8427381fefdf20a0
-
SHA512
e96c6928f31c9eb02d6a95363e8dd570d30c2beb656e93df769f632783a446647776fd69f2cf7f37b0644bd621a54a63852f9d733ca6c674e58a6237c435887e
-
SSDEEP
3072:9HQmBkxRRXyaD45B516FBQ5Ufcp9KvhGxdaImkjQjGiBJy+tO2KgC:+RRX1D4v36nAUfk9waaImxxd+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Pearl10.exe
Files
-
Pearl10.zip.zip
-
Pearl10.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 162KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ