Static task
static1
Behavioral task
behavioral1
Sample
mv Afina I Vsl's Desc.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
mv Afina I Vsl's Desc.exe
Resource
win10v2004-20231215-en
General
-
Target
mv Afina I Vsl's Desc.exe
-
Size
778KB
-
MD5
9e02b91e94d45385141412e3c90608b2
-
SHA1
24af9bb2e1b7bac04a1ebb48f431bc8ec4d5bb4f
-
SHA256
183c71d2749893b3018f8d521712a58c6b3efd449a5ecbbbb12df1da69e0f7f6
-
SHA512
d9c6a424bd8ed393e8f23224f054766de2e8aa97741551e4eaf9fcbf5cb8939d52c8b1be5e38891170ddeace6b6dc740aea9973782b799e5f3d39e89faad3e88
-
SSDEEP
12288:mm5QyiEHaZz20Bi2NKZes2Pjls2LQP+mjp2mcN0w:mryv694UsEmjL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource mv Afina I Vsl's Desc.exe
Files
-
mv Afina I Vsl's Desc.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 766KB - Virtual size: 764KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ