D:\MGROverride\Release\MGROverride_1.1.pdb
Static task
static1
Behavioral task
behavioral1
Sample
MGROverride_1.1.exe
Resource
win10-20240404-en
General
-
Target
MGROverride_1.1.zip
-
Size
52KB
-
MD5
93794cdff1f0a23fe5e9fd869fa57be7
-
SHA1
df7d363872b35023525f5c5427d7818169dd9da9
-
SHA256
ec05df1884d8f4279b63f9ac099056169c3bb93ff6b88ac8015ad0de9bb4323d
-
SHA512
47a4bac5ca318b0b9c9bf06c2684a1c72e3b500ac7fc3ae040ef897bf3fcd503d31c404abd017f91f186679cc7c77ad523935a5ecbefb5452fd3f3c825e7300f
-
SSDEEP
768:F67wl+8RQdUX94yOvwcGkU9bURvRcbAWuBlXeFGvTAGQe92GfDyDgHeRuFpRDMFM:ICl+Ut4VYfBi1BwF4tXP+qUurp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/MGROverride_1.1.exe
Files
-
MGROverride_1.1.zip.zip
-
MGROverride_1.1.exe.exe windows:5 windows x86 arch:x86
a63ec960f8894e088cc603394496bd88
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
RegisterClassExA
LoadIconA
SendMessageA
MessageBoxA
EndDialog
LoadCursorA
GetDlgItemTextA
DialogBoxParamA
SetDlgItemTextA
comdlg32
GetOpenFileNameA
msvcr100
fwrite
ftell
_getcwd
strcat_s
fseek
fclose
_amsg_exit
__getmainargs
_chdir
_exit
_XcptFilter
_ismbblead
exit
memset
_initterm
_initterm_e
_configthreadlocale
strcpy_s
_commode
_fmode
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_invoke_watson
_controlfp_s
vsprintf_s
fopen_s
atoi
malloc
free
__setusermatherr
fread
_cexit
_acmdln
kernel32
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
DecodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
GetTickCount
UnhandledExceptionFilter
TerminateProcess
EncodePointer
GetStartupInfoW
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCurrentProcess
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ