Static task
static1
Behavioral task
behavioral1
Sample
MV C.ATLAS PARTICULARS.exe
Resource
win7-20231020-en
General
-
Target
MV C.ATLAS PARTICULARS.exe
-
Size
700KB
-
MD5
40a6aec425ccce9fd1a8e402e27dbd6e
-
SHA1
d916a1e0641091654f515b522c65f8cdc70851d3
-
SHA256
ade5d471bce12136dbdb044a73285664d32453f79b3b224130bde18e9f0a48ad
-
SHA512
89611b88bc5b535a4af006c9bf6593eca5b1b422a8329f4a65bf5b04ac97bce68fa3a99723a4bca8cf6782168629c8c3816f733eeeae3dd8bdf21fd2b32fda1f
-
SSDEEP
12288:Tw3IU8S6eUdHvN7bc2MfNFEW1DOyhUPk2ztAQSNJWMN5:TOItSAdPN7bc2MfNOW1DOeUPk2aQSqK5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource MV C.ATLAS PARTICULARS.exe
Files
-
MV C.ATLAS PARTICULARS.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 632KB - Virtual size: 631KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ