Static task
static1
Behavioral task
behavioral1
Sample
Ресторан Cloud Monet.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
Ресторан Cloud Monet.exe
Resource
win10v2004-20240508-en
General
-
Target
Ресторан Cloud Monet.exe
-
Size
1.2MB
-
MD5
f4bdddc37aa65a36123c12ddc67ff7f1
-
SHA1
d3ecb2ab01caa2ea4138507a8a5ad9880a189cb9
-
SHA256
bcc885f07d382de9efc58a03dbfbcd190fa013fa7d5391e8a2ddb683c28c75a0
-
SHA512
820908613155f7027da194f7525e7f988c0e57897fd710bbbc2665a814c17b82e4833e18d818566473abd4cedb48a16829c07f0389ce33b93aef2fb856f6df31
-
SSDEEP
24576:BGiluZ/1g6NqRV4nex0Cl8VHK+eyGmfsUakeJiDA3/7X74Cws:k51g6c4Mv8VT3fTeyA3/XNl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Ресторан Cloud Monet.exe
Files
-
Ресторан Cloud Monet.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 945KB - Virtual size: 952KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE