Static task
static1
Behavioral task
behavioral1
Sample
Pegasus-Pantheon-HVNC-V2-VNC-Hidden-Browser-Remote-Administration-Rat.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Pegasus-Pantheon-HVNC-V2-VNC-Hidden-Browser-Remote-Administration-Rat.exe
Resource
win10v2004-20240226-en
General
-
Target
Pegasus-Pantheon-HVNC-V2-VNC-Hidden-Browser-Remote-Administration-Rat.exe
-
Size
370KB
-
MD5
56f95fd9402eeba4d0fd6a4581e281df
-
SHA1
8037fb649c98509f80465c6ac8b6687165e9749f
-
SHA256
ffecbbb49acac85e98a20fb2abecd81b6bf549ef5f4d1da8747b1e648fa5109d
-
SHA512
9f071f48177574463441d436dd06d3d8d8315bc595ce0985495815828f52ae32b93e1cd51b65234c7a6fed669c0709830a8d7e6487c1c5ca7ecc80bf00826e97
-
SSDEEP
3072:Op2HXRzFJ8ry3CQr/MfNY5F6fmlc/hbDDDgfwM5R/r7X1HEIkDe:OpcRjhMfmj6Ec/VcfwMDFE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Pegasus-Pantheon-HVNC-V2-VNC-Hidden-Browser-Remote-Administration-Rat.exe
Files
-
Pegasus-Pantheon-HVNC-V2-VNC-Hidden-Browser-Remote-Administration-Rat.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 125KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ