C:\Users\gebek\YandexDisk\CODE\VSC#\me_core\me_core\obj\Release\me_core.pdb
Overview
overview
3Static
static
3=).rar
windows7-x64
1=).rar
windows10-2004-x64
1макро...le.amc
windows7-x64
3макро...le.amc
windows10-2004-x64
3макро...os.xml
windows7-x64
1макро...os.xml
windows10-2004-x64
1макро...re.dll
windows7-x64
1макро...re.dll
windows10-2004-x64
1макро...es.xml
windows7-x64
1макро...es.xml
windows10-2004-x64
1макро...н.exe
windows7-x64
1макро...н.exe
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
=).rar
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
=).rar
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
макросы/Double.amc
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
макросы/Double.amc
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
макросы/last_macros.xml
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
макросы/last_macros.xml
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
макросы/me_core.dll
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
макросы/me_core.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
макросы/modules.xml
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
макросы/modules.xml
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
макросы/Макроскин.exe
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
макросы/Макроскин.exe
Resource
win10v2004-20240508-en
General
-
Target
=).rar
-
Size
268KB
-
MD5
952bf94894fca583f8f123868fcf8e04
-
SHA1
a8ffab6bf5452e9e65294cbde9dd69034228a9c0
-
SHA256
cb78e240048ab5a92ca45e5faff74495437d87e0c23fefe7382722581acad61d
-
SHA512
8a304516cab4326cdfb8a9e91b2d29a2d8eed89744f042f7151e0cb9076ce9b0840823f769b22427cb672908333572ba836180c549772c4556a16f2d89ba612e
-
SSDEEP
6144:07CfGyJ0mH6LnVm6bTlwFLY+4guaxNKKkcXetjQ/GE86+TWrDdhp:7H0m+80wU+4ANfkQajQjlDdhp
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/макросы/me_core.dll unpack001/макросы/Макроскин.exe
Files
-
=).rar.rar
-
макросы/Double.amc
-
макросы/last_macros.mefx.xml
-
макросы/me_core.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
макросы/modules.xml.xml
-
макросы/Макроскин.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 387KB - Virtual size: 387KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ