Behavioral task
behavioral1
Sample
DarkNight.exe
Resource
win7-20231215-en
General
-
Target
DarkNight.exe
-
Size
41KB
-
MD5
432c76483b1f85e02fa0ec10e9fc4b23
-
SHA1
68095f50ba3ceddf814fac7c5a1d46565fe142dd
-
SHA256
b8459e54a7cd3269bf03bf7542860363ed4403f055d38c04172802932890349e
-
SHA512
96654694fcd0fcef53b1e60720e25d6f31145d74a38fdc6b30efb8cc0a046779665a79f8070db5f0e0f3debac12227ab0ab0007876b7c990bafa79e6eb669424
-
SSDEEP
384:8j98od26t4gc/B3eOYbG3bDMYCCirZNCnPGSi0Fwxark7T5rYcKrFt:Q9F26tYeO4G3bQYw+Ixar0FYcIP
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DarkNight.exe
Files
-
DarkNight.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ