Static task
static1
Behavioral task
behavioral1
Sample
Koroche.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Koroche.exe
Resource
win10v2004-20230915-en
General
-
Target
Koroche.exe
-
Size
191KB
-
MD5
911242c04aee9d0dfe6b4ad01c45911f
-
SHA1
e4edc373f9ffd2c95b31f08ac34c01aa7a001b17
-
SHA256
1bfcacca67c7da862216efa12e421de5381d2bb41efe5acb187bdd57edf6ed6c
-
SHA512
937f2abfb4f467d95b844199ffada837176603f26ca943b5b5ec9342d0072689e894110fd88fc2a33936f109cdfcc9e545dd6db88888add08b1b1931e28f1c21
-
SSDEEP
3072:YKhQsJS1OKynJfaE/uylBzDylgeBKWv680QGS/odFSP0692Y2ElP4k6ot5N:YKhhJS1IJyE/HBXw/KW90QZ/oQt92Y2W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Koroche.exe
Files
-
Koroche.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 188KB - Virtual size: 187KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ