Static task
static1
Behavioral task
behavioral1
Sample
Alpha Cors.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
Alpha Cors.exe
Resource
win10v2004-20231023-en
General
-
Target
Alpha Cors.exe
-
Size
78KB
-
MD5
39f35b87dbaa458a9417c331aa4a4cea
-
SHA1
2d8908d8f02c28733f5280f2ca4370b475ae09e6
-
SHA256
97c1fc9a30733d06866c809549c80eb77db9b0484484fed9d6a465e4264773e0
-
SHA512
9bf162d525d5888f34d33657e596754a1bd9cf0d4eccf0a8095816fc2f4026cb8514da4b7f3d235845068c390b55bc82268af36e578f8f5f6bb8008db9a9c237
-
SSDEEP
1536:u1o09szTtxqh5GzodJwNtAlAcGUaOmZx/8k3F0qP:u6UdJwNtSPGZ8kWqP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Alpha Cors.exe
Files
-
Alpha Cors.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ