Static task
static1
Behavioral task
behavioral1
Sample
ProjectMage.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ProjectMage.exe
Resource
win10v2004-20240802-en
General
-
Target
ProjectMage.exe
-
Size
2.3MB
-
MD5
1cae8fcbe1494ceebafe5cb1d17a1dd2
-
SHA1
ce2d1927239065f4ac2aef3be1690692204564a8
-
SHA256
a94328da2f11dc1cd03e98b69d28911b7c5fc99632f23ea52a5616a533cf1ecc
-
SHA512
9cf90abc4dff148509d15effc99530bcc4d1267370e35003946b5b91f6ac34504c89ae65b0c14264d217d5291bcab43ce9ae149f59e234420b5dff688d4398b1
-
SSDEEP
24576:FutpaS41wMZ0BGO30m1tqBo8MR7e17iugUl0ZMJTZGfZ2hszdoVCTh2t6kGL+Uus:C5YBdl2elGs+2t6kF8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ProjectMage.exe
Files
-
ProjectMage.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 395KB - Virtual size: 394KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ