Static task
static1
Behavioral task
behavioral1
Sample
new world bank procuments.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
new world bank procuments.exe
Resource
win10v2004-20240508-en
General
-
Target
new world bank procuments.exe
-
Size
980KB
-
MD5
9d03081855311174b4a1a32f6983f54c
-
SHA1
0e3ef5f3792598517bb3997b38ad90b8dc254571
-
SHA256
dc9fb99f2096d93f28e49d14c09cd7270cf0124f33c107df3ddf85135a9fc08d
-
SHA512
e300bf1b1a10d1e77d3efc4091589cfc53b0b0f3619c3a0f8b5c27aeb2fd760855e041aab31f141cbc8893be3fd0594946e1471e9664049ab680761d237d8540
-
SSDEEP
24576:LeKo6mP7OETOuj9rjCbfVF5foukrMf8A0UGoAU:SJP9pZqbxfouk4f8iAU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource new world bank procuments.exe
Files
-
new world bank procuments.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 974KB - Virtual size: 974KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ