Static task
static1
Behavioral task
behavioral1
Sample
mesagerie.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
mesagerie.exe
Resource
win10v2004-20231023-en
General
-
Target
mesagerie.exe
-
Size
51.4MB
-
MD5
689e611e1aa281deedfab900e57ae303
-
SHA1
766e01216ea98d125d3e79b70c3a0b33588021da
-
SHA256
40c1987c83c2dcadecdf70f8bd0330f0d8ccdb26b6dc81de8b041e5096ee277f
-
SHA512
af1a98e5d87fc060f8c1eceecf953b7dc76c26f1198500c574496bae26dce7f937fa35ef55021ca9fc4704154b34972f8b1fa2f8f72b193a72ecc069ed68649b
-
SSDEEP
196608:5QPz129Mvru1+hux/uPTcQK/ZjWwQmSCB3Kmlsqyf4eRhtJ5B46MDoU4mAWZRQ3q:FSa1+hW/X/lWSB7lsjweSZ547WZ/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource mesagerie.exe
Files
-
mesagerie.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 264KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ