mm.pdb
Static task
static1
Behavioral task
behavioral1
Sample
mango.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
mango.exe
Resource
win10v2004-20240611-en
General
-
Target
mango.exe
-
Size
1.8MB
-
MD5
b151f8d7b9dcf80375ba12746289c15b
-
SHA1
c826226bfd50994b82aa6de2c1acab492cb042bc
-
SHA256
7b7ffdabadd1e1ea05600f00d17abf7032e65873bc833a50555b7cd8b26c8a17
-
SHA512
cf03670e1872b2ab0c391289b3db0f0076e575b9ca7ce18aa560669028cfc7d378a25771a08cf53d86e8be15a4f769d2acf84b068e325147f1729a6c387d8ecf
-
SSDEEP
49152:VxeSA72PbxqYB4hsVXuRjRzeGxqlegrAq:DxA7MEYmy9eZeGVgr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource mango.exe
Files
-
mango.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
`M&# Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ