PyInit_mhi_pscad
Static task
static1
Behavioral task
behavioral1
Sample
2f64b2444b9108c85943299dec21cfef1a3f4b4fdf459b38578b1514cacfee82.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2f64b2444b9108c85943299dec21cfef1a3f4b4fdf459b38578b1514cacfee82.exe
Resource
win10v2004-20240412-en
General
-
Target
2f64b2444b9108c85943299dec21cfef1a3f4b4fdf459b38578b1514cacfee82
-
Size
7.9MB
-
MD5
4df79621ff81a8e5935ad1bfa5f30ccc
-
SHA1
5eef112b949f1208bc4e0f0de1c34ac611102a72
-
SHA256
2f64b2444b9108c85943299dec21cfef1a3f4b4fdf459b38578b1514cacfee82
-
SHA512
fcfff2e1d5a7c2c7c8c8cc5e5455ceb030d41d4b50e1c18979e0e640563b7796877d0e577d44b52c508ff824f75716019056352fe25ee690d38d45d36300001b
-
SSDEEP
196608:3bOpwmDRR50KOTRtqx59pQ4BouElnz1sS1T5M:rjKHOT/qXQXH1T5M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f64b2444b9108c85943299dec21cfef1a3f4b4fdf459b38578b1514cacfee82
Files
-
2f64b2444b9108c85943299dec21cfef1a3f4b4fdf459b38578b1514cacfee82.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Exports
Exports
Sections
Size: 1.6MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 959KB - Virtual size: 4.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 106KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 397KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 273KB - Virtual size: 11.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE