Behavioral task
behavioral1
Sample
output.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
output.exe
Resource
win10v2004-20240802-en
General
-
Target
output.exe
-
Size
41KB
-
MD5
7d65249804f8c4475ac8a5b3ba75410d
-
SHA1
9a8ae77352022bf3b624fbaa12f5e119efff18a0
-
SHA256
2e1aaca7fe166e5b90e216a0f60166e1f50bf62a852facb3e553629180435c76
-
SHA512
ed9f3798c1bdb3f980a20ed064b0f79957ce0ccb21d770ef1ef2483bbf45fe15972e9af0c966980c53c4d4f1c10f8cadcaa452ba26b501aa364c1bcdf8977c0b
-
SSDEEP
768:UscoSf3GMXfT6axpDXswguZkeQWTjxKZKfgm3EhFq:7coSfnxEeQWTlF7EHq
Malware Config
Signatures
-
Mercurialgrabber family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource output.exe
Files
-
output.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ