Static task
static1
Behavioral task
behavioral1
Sample
Verse.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Verse.exe
Resource
win10v2004-20240704-en
General
-
Target
Verse.exe
-
Size
21.7MB
-
MD5
68f33b384bd88c652fbda2f7b5205b77
-
SHA1
bfe7d6b05d0e9f124fd80a2ec10d1bb1726e63fc
-
SHA256
c5cae63797946652e7603e7f2a96aa2673f034b27f8f08ac319908bff33675df
-
SHA512
bd1da43e015b58d37fadc0309c9dc8a5731a507095f56f24633e0a829f13caa68ebd89fd799057ff9a800fe8f7931e127cffa4c996c5d60bf70358fe4815b106
-
SSDEEP
393216:iiWoETkXox3A04vvpOqBcmxKgUKqFx+PBb3JrpCtixlgH1DEQlrAel4uKO22uPS:iiPETkOA0ov7BcmxT+FxetBfElUelGZ4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Verse.exe
Files
-
Verse.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 823KB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 192KB - Virtual size: 553KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 860KB - Virtual size: 979KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 62KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 33KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
XH4FFHX Size: - Virtual size: 28.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 19.7MB - Virtual size: 19.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 16B - Virtual size: 4KB
IMAGE_SCN_MEM_READ