Static task
static1
General
-
Target
stoverlauncher.exe
-
Size
353KB
-
MD5
7960cd2f4744eae90f5b86a67b385082
-
SHA1
c06db9b3aaec3020485047d96b1dcf668d1a68d0
-
SHA256
f126e9e663bf9834575a23c3c936a3f784f8cca516113dfdca0df0a18b44c67d
-
SHA512
4a8207e56048ff4d68f68bef1a051ba48c28fed3b14ef29fbee247bae724feb1b52225fadee46369f4577af03c47b8822e4a0024b1757cedea6e5042a53e64b7
-
SSDEEP
6144:E/CEZ3QDwR1PXugd51Ou9YW4k5DwU7725vZzswr0xH/163ujxGv8OY:01RVNdyUZ5DwU7725vFVif163ujxGv8B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource stoverlauncher.exe
Files
-
stoverlauncher.exe.exe windows:4 windows x86 arch:x86
Password: Stover
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
Q;3r?;! Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ