RkOo.pdb
Static task
static1
Behavioral task
behavioral1
Sample
MV BUSAN STAR - calling to discharge about 55,000Mt of aggregates.exe
Resource
win7-20241010-en
General
-
Target
e8333a1fbe05181074ecd56ead461f7cce692f052ec66f9a1527b1445070c013.ace
-
Size
623KB
-
MD5
78fe1ea79893cb2c0357f24f01fc5237
-
SHA1
f23d1f9beba904a35a1814ec6eded9406dc26aef
-
SHA256
e8333a1fbe05181074ecd56ead461f7cce692f052ec66f9a1527b1445070c013
-
SHA512
b8e889a3f7318f8748ac3d567510c5574456b338f9faeb85f5fc811724cce0fae1e039eba0425826f8d89d23a6c6a1794235ad97bad6d76a7d8209591c3ef37b
-
SSDEEP
12288:P4RCzcHAjY/YdrqnECb86OUK1BILW/Cv7LZ1niTJWtaa55Q98CWnbe2SLGPt7XY:P4RicHN/YdWECb86O9nQ7LZWa3CfzLK+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/MV BUSAN STAR - calling to discharge about 55,000Mt of aggregates.exe
Files
-
e8333a1fbe05181074ecd56ead461f7cce692f052ec66f9a1527b1445070c013.ace.ace
-
out.ace.ace
-
MV BUSAN STAR - calling to discharge about 55,000Mt of aggregates.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 650KB - Virtual size: 649KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ