Static task
static1
Behavioral task
behavioral1
Sample
Petronas196887.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
Petronas196887.exe
Resource
win10v2004-20231025-en
General
-
Target
Petronas196887.exe
-
Size
618KB
-
MD5
41dbc73bee1ef87c88c302956a0dc3aa
-
SHA1
d021025c40f7dfd15d114a8a9abae755202d8df9
-
SHA256
c62329dbc6a7f5ed969e32302f051442b4181feb66b80f5bb9d2a9a0e2477af0
-
SHA512
153507992862b097b4d3cf7435d4410a0b6beec2f4191046edd563a2ff0ed1e0ad4e1fdd03e5a7d7668f396ee1375f2fd6f717fe60a84859147d7a432b188f6f
-
SSDEEP
12288:+8E69yqLyGhzKGoBznouDqTHJizCeaH/siK8jGgG3/yY95:Y6XVzKGoBT4W6RK8hPk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Petronas196887.exe
Files
-
Petronas196887.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 612KB - Virtual size: 611KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ