Static task
static1
Behavioral task
behavioral1
Sample
MobileAdmin.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
MobileAdmin.exe
Resource
win10v2004-20230703-en
General
-
Target
MobileAdmin.exe
-
Size
3.7MB
-
MD5
756b9d67db26f32d83569397bc61aaff
-
SHA1
5e1394f2b677447c422eb3a707ac695b48c869cf
-
SHA256
4be77a2692a9d54c11577950b88394ac6232420ed22a056acc76c09fcd22d4a0
-
SHA512
eb4733d859e5b4ed70d3b59debef4450226e9b4461beac41ee1d44da65ad943ca74a689e1a4a1307108f97a426d4c2eac42ea3784c716de3ab20149762599821
-
SSDEEP
24576:sfr2mS3oEYltzYNu5Ni7dkrZEZbknu30iC/LhZsba5+tb2yBQSpi6OSAP0HQ8HhC:sfr2mS3oEYltnGkr4936hA6wMJW0eDm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource MobileAdmin.exe
Files
-
MobileAdmin.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 156B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 363KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ