DenuvoNet_launcher[.]zip | Triage

Sharing

General

Target

DenuvoNet_launcher.zip
Size

9.0MB
MD5

e86613b3dce09c8f2dc5782e0e03be08
SHA1

4e47a5344fa2fa28fa44580ad209bc6cde649512
SHA256

242e2392ffcbdd0e2935f27113740d15ec456933478780b34b4470a22bb64609
SHA512

e33f98e0c7f20b47c8b0a8465922893f841328bb8d165b379877a9b9b64d8769ac8341adc4e69c467650da7bbe685c2c9f0e864277fc056a0a84ebae99b4e461
SSDEEP

196608:wfweDkiAfBsQ3/D7+pg0Aeemwoup2lW8rAO4ZlFzbzdI:wfFMf6Q77+pgvm02lxAO4NzC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DenuvoNet_launcher.exe

Files

DenuvoNet_launcher.zip
.zip
DenuvoNet_launcher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

DenuvoNet_launcher.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9.0MB - Virtual size: 9.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ