Static task
static1
Behavioral task
behavioral1
Sample
Veno Temp.exe
Resource
win7-20240221-en
General
-
Target
Veno Temp.exe
-
Size
1.7MB
-
MD5
aca9605cbc0868909bca63dd065b0190
-
SHA1
5a8c54c79bf53adb87a82c70deb0ddf1b629bd79
-
SHA256
e5686c8e9d25b65e8a7e250c9e92fce8b23f5f64c9d358870be6e9e6e5fa51f7
-
SHA512
811842b0134b898e6de933dbd3ded6d91ddad5ce41805ae5c92b2d304feeb2d3e688b8ec839a4b191d737795a8b92e9f2d415970a1c851517ecfc77039d44568
-
SSDEEP
49152:FpJxwITYbNbNWo4kSH3OqtwIrkqXfd+/9A:FjxwIT4bNJFY3Oqt3kqXf0F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Veno Temp.exe
Files
-
Veno Temp.exe.exe windows:4 windows x86 arch:x86
Password: Veno-Free
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 173KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ