Static task
static1
Behavioral task
behavioral1
Sample
IMG_EPDA REVISED MV OCEAN GLORY_SOA_JULY & AUG 23XLs.exe
Resource
win7-20230831-en
General
-
Target
12102023_1209_11102023_IMG_EPDA REVISED MV OCEAN GLORY_SOA_JULY & AUG 23XLs.r01
-
Size
570KB
-
MD5
4d2ff6f521a0ac4263c78325f0617df1
-
SHA1
3d6076304eda0347e1255fc244cceae3886a158f
-
SHA256
36b63d51c1ee4c3963b032013701a6bba0b4214122a5d4b824280865352ad68a
-
SHA512
97d8e02518be201df281ec659b7f042919e1c7f3ecb6b3e45cb4ebdb01dde04309c6dc71d31c1cf043e4d7278d77cf3df005ef62dc9108eba22f5ad9f8b252c8
-
SSDEEP
12288:TUip+IxICYl+4J5jM2z8fGug5vpzgPC2ExWhndQT5jtiPw:Tvp+IiBl+b2zNP5ZgBr0uI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/IMG_EPDA REVISED MV OCEAN GLORY_SOA_JULY & AUG 23XLs.exe
Files
-
12102023_1209_11102023_IMG_EPDA REVISED MV OCEAN GLORY_SOA_JULY & AUG 23XLs.r01.rar
Password: infected
-
IMG_EPDA REVISED MV OCEAN GLORY_SOA_JULY & AUG 23XLs.exe.exe windows:4 windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 692KB - Virtual size: 692KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ