C:\mhf-jpn\trunk\develop\mhf.pdb
Static task
static1
Behavioral task
behavioral1
Sample
mhf.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
mhf.exe
Resource
win10v2004-20240802-en
General
-
Target
mhf.exe
-
Size
922KB
-
MD5
3952347a8564b63da26e56e2e79a7d11
-
SHA1
7afcd4eec23c4e5dc8e9e1ee2eedf2571c8810f2
-
SHA256
bd51584a31ebb5f0aa4c2502b40fbf64ca52de929e2a1e8e482dad58732db88f
-
SHA512
836dcb13a36b9e800265e9091d53a72f81e2083607aa113761f5b04b5c2e15131cc2df3200b8cc3d0676f0f8af1c66b512e2c0ac1e17602fcbd228d274b035af
-
SSDEEP
12288:KJTPBe6rqctVjWzl1jNN7uld4YZBWMPbwy1RaKC9RPclS:KJTPBZfczl1jNNnYzWMDTbpuSS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource mhf.exe
Files
-
mhf.exe.exe windows:5 windows x86 arch:x86
Password: 2005
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Exports
Exports
NvOptimusEnablement
Sections
.text Size: 228KB - Virtual size: 228KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 638KB - Virtual size: 638KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE