Static task
static1
Behavioral task
behavioral1
Sample
City Locater.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
City Locater.exe
Resource
win10v2004-20230703-en
General
-
Target
City Locater.exe
-
Size
2.3MB
-
MD5
56ee68e49711869af7ba5cf6fe26b777
-
SHA1
0746f3bc8d277d11a667a5406ba8950ba6b0055a
-
SHA256
66b28a44a0849791b427304486339bcd16047a01496ffe190b6a33c5e1847877
-
SHA512
13088c25156688d1117433f37fae7c266d14a007e92c4073283eef4c4a249e8706ff32c08360e7c3a40517632f162add7db6c13c6ddcace2ff6838bffe273537
-
SSDEEP
49152:Xn2SqN+H9aIk5KPXV5EVG6oBGTWljFzrnpYqcvl/i62SqQ+H:XbfdhkAXV5EAdBGkFzrpMvNiK0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource City Locater.exe
Files
-
City Locater.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 341KB - Virtual size: 341KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ