Static task
static1
Behavioral task
behavioral1
Sample
moe_map.exe
Resource
win7-20240215-en
General
-
Target
moe_map.exe
-
Size
369KB
-
MD5
11c885d1fa25760f4df9cd128dd60f1a
-
SHA1
c0e188d79d96e1baf7d326858acb555cb963ffb5
-
SHA256
3a87b7761320c7afd941546568095066f7cc6e7aba76e60de7f2fd0c9e4592e4
-
SHA512
a15c66cc3a959f6b015ccaf7e18f5b083fcc4f41a3c7025d16655358263bc20c4c03d18791ff5a2aa9400a8129c3b44e920d18d7974c30b3000cb0dfd05d959f
-
SSDEEP
6144:KUlaockXTmUpKxYn0GCXay7L6gx+zf0FnA0Q6dXDCIW3O1z3NTdh/vVwz:KN2DmUWYn0GzySgxMuAyfUO13xdh/q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource moe_map.exe
Files
-
moe_map.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 314KB - Virtual size: 314KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ