C:\Users\Ahmed\Desktop\C#\VAZAAD CMD SECURE\Downloader\obj\Debug\MORO.pdb
Static task
static1
Behavioral task
behavioral1
Sample
55caca07c43867fb89e89aa3d90008e890f85a9f46eedd4078c067faf99f6cdaN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
55caca07c43867fb89e89aa3d90008e890f85a9f46eedd4078c067faf99f6cdaN.exe
Resource
win10v2004-20240802-en
General
-
Target
55caca07c43867fb89e89aa3d90008e890f85a9f46eedd4078c067faf99f6cdaN
-
Size
180KB
-
MD5
d181de6f1253b35a2fd5a779eac733f0
-
SHA1
aa9a975efb8d055ca723b90243a6c2d27155a649
-
SHA256
55caca07c43867fb89e89aa3d90008e890f85a9f46eedd4078c067faf99f6cda
-
SHA512
6be5a43adeebc7cfa4acbfb6a6f9dbaaaec5343e652790d362e14664cc1e2cae94217a29172661c2b4acaa1dd11dd7fa2579a91e6b078920b963dd4d1f07ce77
-
SSDEEP
1536:mKQgwTmGX0twRlOHhGu3RYpeM6JrRrV4d2LEwEkE7x9/dkDwqDwFDwFDwZbhTcvu:ygwCGEtwRlOBGEe6zk9Xcv2vuq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55caca07c43867fb89e89aa3d90008e890f85a9f46eedd4078c067faf99f6cdaN
Files
-
55caca07c43867fb89e89aa3d90008e890f85a9f46eedd4078c067faf99f6cdaN.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ