Static task
static1
Behavioral task
behavioral1
Sample
CATALOGUE.exe
Resource
win7-20240708-en
General
-
Target
CATALOGUE.zip
-
Size
459KB
-
MD5
1b9b749f71b01ebcd43c873b8ced0750
-
SHA1
c1d4ab0ac1224ffd96bddd089370fcd1a6dc8dba
-
SHA256
cd4aa5fa47501d5af7bdd51bd6547975c7319f7de6f1210503dc8ded5c4d5416
-
SHA512
8232d383cb28f3e49ad5edd8deefafc2b991c5d47ac040151ed10a76dbc696b7e68590e892e375c832f08aa30a9ed8347d9da5023c29e9116fae72a7ae88c2d8
-
SSDEEP
12288:ptVhRah55F/p+gbfRv4IsoLaUIx23xsarh:pbM5F/nrRvj5Ix232arh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/CATALOGUE.exe
Files
-
CATALOGUE.zip.zip
-
CATALOGUE.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ