Overview
overview
6Static
static
3monoware_1v1.lol.rar
windows7-x64
3monoware_1v1.lol.rar
windows10-2004-x64
3MonowareInjector.exe
windows7-x64
6MonowareInjector.exe
windows10-2004-x64
6SharpMonoInjector.dll
windows7-x64
1SharpMonoInjector.dll
windows10-2004-x64
1smi.exe
windows7-x64
1smi.exe
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
monoware_1v1.lol.rar
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
monoware_1v1.lol.rar
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
MonowareInjector.exe
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
MonowareInjector.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
SharpMonoInjector.dll
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
SharpMonoInjector.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral7
Sample
smi.exe
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
smi.exe
Resource
win10v2004-20230915-en
General
-
Target
monoware_1v1.lol.rar
-
Size
26KB
-
MD5
02f3f8ee1a1475775a20452b98ebe145
-
SHA1
aa0e4c0030649ac52f617948b863755c31f41308
-
SHA256
ff075f1bf86eab4555fe7de0e9ff6802e320da2d69029dbc416222a7f83104c8
-
SHA512
96442a27633e59de83ab34b3653281efb199886d954ee4f0ba30e31afe0939084a96adba345ff0272572e76e48217ff1ddcf79b3eeefd15467cb43e26f2589a8
-
SSDEEP
384:gDh6/3MDKjs5iN8FbB0wsqoh/Z4i7MqMZITeFj7/lp7vyy6dGyTrXA/JCPevFh74:wkcDJFAVZZ7MqOIOl/6eJmyb4
Malware Config
Signatures
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/MonowareInjector.exe unpack001/SharpMonoInjector.dll unpack001/smi.exe
Files
-
monoware_1v1.lol.rar.rar
-
MonowareInjector.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
SharpMonoInjector.dll.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 876B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
smi.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ