Static task
static1
Behavioral task
behavioral1
Sample
MRKU8781602.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
MRKU8781602.exe
Resource
win10v2004-20231215-en
General
-
Target
e078b475809986ee55948bb768ee9cde
-
Size
455KB
-
MD5
e078b475809986ee55948bb768ee9cde
-
SHA1
d226c78d1403e1d6eddf71391814ade0d3ee6099
-
SHA256
2d0efd49d4743047d816c892185352bf7bb107210e325e1a8415d5803eb317fe
-
SHA512
7d9add9296b32c1514872ce03ebee5cc799cb5fcfba701562ef423d8e1ad38b2d9d60b4a0015af6f1f80026dc7ef399c5be29c53c026365de71d555b42f255a2
-
SSDEEP
6144:bDycp1geLGVRLEJXoGJByRYThyyCGQuEnmubCT1VbVGQQfO0ciy4yyYdvdEZOZrZ:yUqMGAbJaYT8ygdmqlN2bFbIZ2q4upi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/MRKU8781602.exe
Files
-
e078b475809986ee55948bb768ee9cde.zip
-
MRKU8781602.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 610KB - Virtual size: 610KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ