Static task
static1
Behavioral task
behavioral1
Sample
DISCHARG.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
DISCHARG.exe
Resource
win10v2004-20230220-en
General
-
Target
Discharge Inv 08578-96809.img
-
Size
1.2MB
-
MD5
9235a378de2df568f6692ba9826ab7a9
-
SHA1
dbb243bf533ce6c37a6665d5d66200c5c4ab3d38
-
SHA256
09dee9d2f9897ae15925c5f26a098e4817232ebd41b1b5c63ef38b0b459eef12
-
SHA512
0d99c5aac17541fd0e37ae34260318512d319851998f3b093e6fbd3294849f9a38150fb5f0d4e6ab8856c8c4ef6907fee83f0983c0690bed7562fb30ba74c82e
-
SSDEEP
768:TlDrdDtfoYx9PhFczlpFzMstb/yFE4rnr:hndDtFXsLzMbFz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/DISCHARG.EXE
Files
-
Discharge Inv 08578-96809.img.iso
-
DISCHARG.EXE.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ