Static task
static1
Behavioral task
behavioral1
Sample
grace.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
grace.exe
Resource
win10v2004-20230703-en
General
-
Target
ORDER 0707-23.zip
-
Size
411KB
-
MD5
5dcbac100b2372bed9b27d9cace952c7
-
SHA1
bade53f0d06cf261acf4857ae4de43ea8b2f362b
-
SHA256
75d2a038f6df4f6d45079eda07f440e91fc54fd2ddc3dc36a36363e1ca89972f
-
SHA512
b98f5830663f4f9a9f68538d1cfa165b3af16938171334e3f81cc77260e8ea2618c0d57b53aa409cb9eb098eba360861d01313a0f86f12c6867067c553d50937
-
SSDEEP
12288:DN0pF4/ddv/w+P54oiiGT0vfEMaJMKsaRRa7:h0iv/w+PeZi9XEMsMKnq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/grace.exe
Files
-
ORDER 0707-23.zip.zip
-
grace.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 594KB - Virtual size: 593KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ