Behavioral task
behavioral1
Sample
WantedLaucnher.exe
Resource
win7-20240221-en
General
-
Target
WantedLaucnher.exe
-
Size
1.6MB
-
MD5
319c5840b3c067a2163e7a116becea0b
-
SHA1
0883f0aa9124db1eec85dadcc7bcb73735fd0c64
-
SHA256
d0f6a9a88055c32a8b4457da0a62806a9881c190632838f24f6f6f75f67e2c48
-
SHA512
1fcb908cb844d13d782722a127a4378874171147f51a1df3728f3229aff5eb5eed7c3d0ef4f8a1befa36711ad81552f118eabc7a78a1e464927730919046c705
-
SSDEEP
24576:SdwmLz1/pRAOl1aUcOpISUPCrglMa0SLa0eRks76q8az3eyC1vVdviNzbON:SdwCeNKp1UPYSMa9W0iHuaTnC1vj6
Malware Config
Signatures
-
Detect ZGRat V1 1 IoCs
resource yara_rule sample family_zgrat_v1 -
Zgrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource WantedLaucnher.exe
Files
-
WantedLaucnher.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ