Static task
static1
Behavioral task
behavioral1
Sample
ENUGWMKC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
ENUGWMKC.exe
Resource
win10v2004-20230703-en
General
-
Target
ENUGWMKC.EXE
-
Size
558KB
-
MD5
5fc2ab5d7ee58d720b51fcac2128e3a7
-
SHA1
dde96823e72d02e4b4012db0ae8584d89b4b6e2a
-
SHA256
6cf383ce1308f42e733499222566c933b72f72867e99a087208f556d321703c8
-
SHA512
dd63ea62b9f0d86afc3e499bd540fa4904bae48603ad7f11e662cb604e56b5c345b2c1fa0273827c14fbf895ce404f6d2b9eeaad9ed244327b7ff051de8b3079
-
SSDEEP
12288:iT3aGrbzZfBNZ5Eha+N7YgoO3Iy3fC3MEm7PHn:gFhBNfAa+NcgoFy3fKRg/n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ENUGWMKC.EXE
Files
-
ENUGWMKC.EXE.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 555KB - Virtual size: 554KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ