Static task
static1
Behavioral task
behavioral1
Sample
MV GOLDEN SCHULTE.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
MV GOLDEN SCHULTE.exe
Resource
win10v2004-20240508-en
General
-
Target
MV GOLDEN SCHULTE.exe
-
Size
637KB
-
MD5
94d1ab9bbee00e3c1d25735c015fd5b4
-
SHA1
5e0bae77d89191897d1fb9d1fe0c2ec0566ea02c
-
SHA256
cb970671c87c5ab16a4dcdbeebd306f103250d7fc0b74f83e711383f4cd5495f
-
SHA512
c765bc612018ed12bc21a5d598a2057f209d6de468b5a11e99ef0494cf8d15d7b678adc51e2a1c52bbc9477773d448451a138e473ff6bba3ca3c980f89b9bf28
-
SSDEEP
12288:6Yydp/qunaA29M7ZCx5NZwBUBRTlY5ugie6PKrPJscT7cgnU:63JqEl29M7ZCXNC6MJs5gn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource MV GOLDEN SCHULTE.exe
Files
-
MV GOLDEN SCHULTE.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 635KB - Virtual size: 634KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ