Behavioral task
behavioral1
Sample
Corefarm.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Corefarm.exe
Resource
win10v2004-20240730-en
General
-
Target
Corefarm.exe
-
Size
887KB
-
MD5
1a52afc51a7342a3712890ff4686a421
-
SHA1
bf1d860bc8177c7737e74f1fc7026997b5c38322
-
SHA256
e9bef956a5fb946aa7b46c67c2f04cbdbf68e45b99cbb43b1254400a7a2347a0
-
SHA512
74e5167aecabb8c8aa874c6675abfca0c154f7d3ee17a7ea30019b5880d21e3ec945483584685d3ca4143186ac195c3ac15d3a9247ad272ba5738753f6219f83
-
SSDEEP
12288:2TEYAsROAsrt/uxduo1jB0Y96qgcFJKlJejrnChb/7HYJnLPdyBoUl++6p6aN+lu:2wT7rC6qpFJKl8uhHmSoUl+IlH
Malware Config
Signatures
Files
-
Corefarm.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 266KB - Virtual size: 265KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.eter0 Size: 443KB - Virtual size: 442KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.eter1 Size: 173KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ