Static task
static1
Behavioral task
behavioral1
Sample
grace.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
grace.exe
Resource
win10v2004-20230703-en
General
-
Target
5dcbac100b2372bed9b27d9cace952c7.bin
-
Size
412KB
-
MD5
d52c0f30c1fb941478cdc4bb5616bec9
-
SHA1
274f2ef8e6f054669dc0bc033f0fdc607863c853
-
SHA256
093b1223aeba747f248a0336e1c7adcee3d2fd43d9fc78865ecaaed028f5212a
-
SHA512
a81f3910ff6113b11fb2788e9f0089bf6aaa51f050ce2c0de73a72badec06f53b101f341e9c2dba8abefcd19b95501ddb8e46c639358c18953542032c439c2fb
-
SSDEEP
6144:Cb5Cb/V8mJ+pH83tQbvoFzA0F1gIDmrP7HnpIxEXDzR8myaAD9q0Wj:46/VF+pc3tQbvCdgcEXDzjy99DWj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/grace.exe
Files
-
5dcbac100b2372bed9b27d9cace952c7.bin.zip
Password: infected
-
75d2a038f6df4f6d45079eda07f440e91fc54fd2ddc3dc36a36363e1ca89972f.zip.zip
Password: infected
-
grace.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 594KB - Virtual size: 593KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ