Static task
static1
Behavioral task
behavioral1
Sample
PAL2NTSC.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
PAL2NTSC.exe
Resource
win10v2004-20231025-en
General
-
Target
PAL2NTSC.exe
-
Size
80KB
-
MD5
e3f562dc89db7efeace50793d72020b5
-
SHA1
232d05677271944f24bc012725f0ee6576c36218
-
SHA256
708a55876b58a673961a3f896d029aa037c13c50d3cf2307637b7e44682504d8
-
SHA512
8916813325a873208ee995641a6474785836bf83d3d9315468b9e9c9e3d6d7999fe43697e300239a025aab72a6cc21cf9e4477474bf3c7b41b62891f4cfa9e5c
-
SSDEEP
1536:kAuYTjdfT/kiosw/DYnUr1C7XsqQWiwCV///FE///////////////UCI9ntKsV9F:kAuYTjdfT/kiosW33nCI9ntKsm8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PAL2NTSC.exe
Files
-
PAL2NTSC.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ