Resubmissions
18-09-2023 10:26
230918-mgvk1sba56 3Static task
static1
General
-
Target
ValyseLauncher.exe
-
Size
114KB
-
MD5
4c90b8333e5e0af95c6127cf5cb7c56d
-
SHA1
fb4d96abad64b75b016fdf7d3dc26a4aab56dad1
-
SHA256
8134cc401d1b72208f1bc0eadf2bed3190179cac8f90144f9bb92c23c1bbb8e3
-
SHA512
2d8dd1c79693a97c6eb08738f6525f8e447e62960e6dde57b3d8d022764e5cedc23bc4ddd28796902b640362534939d0988adf1e912f7d963db9f208838ecfd4
-
SSDEEP
384:rjaRSLqebgVhQvAUHN0e1d5tYeMgedK0UmqUEPWioHjI9tnCn:CR6oW50eHf1edxeUioDUC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ValyseLauncher.exe
Files
-
ValyseLauncher.exe.exe windows x86
Password: as
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ