Static task
static1
Behavioral task
behavioral1
Sample
000-CM-PO-029(ALMMG).exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
000-CM-PO-029(ALMMG).exe
Resource
win10v2004-20230703-en
General
-
Target
000-CM-PO-029(ALMMG).exe
-
Size
459KB
-
MD5
fddd39c885152788edae6609380d7aaf
-
SHA1
4002cfeb2ca3b9d127c1cba77141f6bc6148099c
-
SHA256
182b232a8e351f61a8f5c87aaeb3f445720f2818e566b4204db321a2e9291696
-
SHA512
8998b04dacdf333f272ab1c010c162877ed5e5e25024b29644cb99a70bb9d311dcde9fec68fe805952786a14d96943564bd0e4b1378ea2a051c8892f0da1ec67
-
SSDEEP
12288:cqTrQaSejL8Z3sexyEG7Q/HyQnUjOdXjNDZnfkVCtm6EbUVz1HE3azSjvf:cqTrQaSejL8ZcesEX6crZDZfKCtmHe1C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 000-CM-PO-029(ALMMG).exe
Files
-
000-CM-PO-029(ALMMG).exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 457KB - Virtual size: 456KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ