c:\4nr487eqm\obj\Release\MSG.pdb
Static task
static1
Behavioral task
behavioral1
Sample
MSG.exe
Resource
win7-20240903-en
General
-
Target
MSG.exe
-
Size
321KB
-
MD5
9fd9006e9ebde2ddad61172047500791
-
SHA1
f6dad4969200c53ec09bc20c60cf06545976c94b
-
SHA256
f5f407a74576b6621ffb5d52f2107c9dfc09847f4b0e83b62e55f0eb0257dea8
-
SHA512
6ce733054959fa951cb6e20287c69bc565d60108719fbbf3d2f167292e8fe4effb082ba7476af32d2f12de7a07cf34ea6664fe64ed28ecd701130dfcd176e4a9
-
SSDEEP
6144:nour+mI5gzR/bnpuRpgXjsLsTid9FT6ZXicWnk2CUVfFGuMi2ITKMubNnDl4EQ8f:ZNXZbnpucYxb6QkMPGQ2kTubNVQbQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource MSG.exe
Files
-
MSG.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 318KB - Virtual size: 318KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ