D:\Sergio\Projects\AR\astral-report\Core\Mercury\obj\x86\Debug\mercury.pdb
Static task
static1
Behavioral task
behavioral1
Sample
46c2e758a2c45ccbd78621fd1548bb72fd97bf61375507840799d36c77b5c195.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
46c2e758a2c45ccbd78621fd1548bb72fd97bf61375507840799d36c77b5c195.exe
Resource
win10v2004-20240426-en
General
-
Target
46c2e758a2c45ccbd78621fd1548bb72fd97bf61375507840799d36c77b5c195
-
Size
2.9MB
-
MD5
57abe6b6abc317c6f6ddc2b6cd74c7b3
-
SHA1
c252dece372c614bbd1f5b9f7c7135bf6456be48
-
SHA256
46c2e758a2c45ccbd78621fd1548bb72fd97bf61375507840799d36c77b5c195
-
SHA512
cff4609f9a77958c5f58eb66171d7561ede6e38bac86b215d03a3e6d475a404fa13a45466cfe3cd4501fa390855e06d8a583985f750b4c502107224d82f71625
-
SSDEEP
49152:w0AZeuW8TECNqGoQIBurgYdk0xj0tQ5pE80fnMmz:oZg8YCNKQIB/Z0xjMQg80fnxz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46c2e758a2c45ccbd78621fd1548bb72fd97bf61375507840799d36c77b5c195
Files
-
46c2e758a2c45ccbd78621fd1548bb72fd97bf61375507840799d36c77b5c195.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ