Static task
static1
Behavioral task
behavioral1
Sample
ProNest.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ProNest.exe
Resource
win10v2004-20230915-en
General
-
Target
ProNest.exe
-
Size
20.1MB
-
MD5
a7dc7f1285987722f0ee3e31151debe4
-
SHA1
12113d718a589f17853083cf938378243977e32a
-
SHA256
700d4a61ec8d6e2e1b6ace8979ad1e1b67c41ecbff5c720949b52a9d67ea731f
-
SHA512
40a28754d0ce6c2a3c34788a0aaabb10efb943ef4815900be8b4544ff5820ceaa92d61f4a986f3bcd33270a91cedbc4d94c80b8168237c5e554e12119fa0497b
-
SSDEEP
393216:Y+Xh6fjS8x4+5yBRGBEq/lREUi7AwD89N3JgMi5nF3FmCCNS:3XsLpxTkBDg0UUAwD8z3SMiH3B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ProNest.exe
Files
-
ProNest.exe.exe windows:5 windows x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
SSQA Size: - Virtual size: 43.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SSQB Size: 19.6MB - Virtual size: 19.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 487KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE