G:\GithubSource\Mir3_Client_Source\Mir3Game\run\Mir3Game.pdb
Static task
static1
Behavioral task
behavioral1
Sample
7b0ac8fec2e04bfbb8c42cb0944bf89de8c336d3916cd4e86f0f98f1a4659c77.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7b0ac8fec2e04bfbb8c42cb0944bf89de8c336d3916cd4e86f0f98f1a4659c77.exe
Resource
win10v2004-20240802-en
General
-
Target
7b0ac8fec2e04bfbb8c42cb0944bf89de8c336d3916cd4e86f0f98f1a4659c77
-
Size
3.5MB
-
MD5
e9f15d6976cc2201bfba5d4781ce1a69
-
SHA1
519e3aeda6b0952cecf9d333f7e08cee7aa8c2f0
-
SHA256
7b0ac8fec2e04bfbb8c42cb0944bf89de8c336d3916cd4e86f0f98f1a4659c77
-
SHA512
5c41f4c90a4c2dea8eb38a91c563b1202d3b8988c3fe913dee5da6def7eae21a14f86ea19986cf25832ef25dce222707cccad6914af785946a2b010df93ab3f8
-
SSDEEP
98304:R50hdB4b2ljDFfMEV5cZHd2bOoup86unPBE:v0hDljDFME2uOC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7b0ac8fec2e04bfbb8c42cb0944bf89de8c336d3916cd4e86f0f98f1a4659c77
Files
-
7b0ac8fec2e04bfbb8c42cb0944bf89de8c336d3916cd4e86f0f98f1a4659c77.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
Size: 1.1MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 91KB - Virtual size: 271KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 48KB - Virtual size: 6.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 3KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.debug Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vm_sec Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.winlice Size: - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ