Behavioral task
behavioral1
Sample
vng-aoe_trainer.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
vng-aoe_trainer.exe
Resource
win10v2004-20231215-en
General
-
Target
6585a8181e649426ff046c3cb6d726a6
-
Size
223KB
-
MD5
6585a8181e649426ff046c3cb6d726a6
-
SHA1
21005dca88392c14b1dc5637faf43124d0b75139
-
SHA256
ebc29e94a202e97c6decf188a6a5f8e9ff595ded25d1f48fdf26429fab72a955
-
SHA512
27637545d1fd12b90633692b0e8c8133bc058206be25bf22891175c2dcbb5b5b3e0a8d8730a636e0ac7391792a705b1b1754700984a29b49c52569805f1bebf5
-
SSDEEP
6144:K/7Hyxe75GANxfj+WJPpz+KAYfejFCfIE:uyxe7LJppHAjj8IE
Malware Config
Signatures
-
resource yara_rule static1/unpack001/vng-aoe_trainer.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/vng-aoe_trainer.exe
Files
-
6585a8181e649426ff046c3cb6d726a6.rar
-
vengeance.nfo
-
vng-aoe_trainer.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 324KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 222KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE