RkOo.pdb
Static task
static1
Behavioral task
behavioral1
Sample
MV BUSAN STAR - calling to discharge about 55,000Mt of aggregates.exe
Resource
win7-20240729-en
General
-
Target
78fe1ea79893cb2c0357f24f01fc5237.bin
-
Size
623KB
-
MD5
626f4510211d0f7f43a2cd33058566b0
-
SHA1
35ee143cf31409ad17a5d1887999d252d7a3695b
-
SHA256
9de6d5b538e1d3c49cb630fe24fd7979eaf38d855180335da8023d627a6ae787
-
SHA512
cd92c970f1990173a7b0b2e00da636bf1586def0c4391046e35e21f9f71f17eda77ec8cd578ebe3946e93aa76122e0e5f6083bf456bec6cd485be62946672349
-
SSDEEP
12288:WszF7GBDBdsWZa1l57PJ45+B1fxgTBSXxPxLAsh1iumJuVfKQe:P9GBDjLZ+LPJOaf6TBwlRNidQe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack002/MV BUSAN STAR - calling to discharge about 55,000Mt of aggregates.exe
Files
-
78fe1ea79893cb2c0357f24f01fc5237.bin.zip
Password: infected
-
e8333a1fbe05181074ecd56ead461f7cce692f052ec66f9a1527b1445070c013.ace.ace
Password: infected
-
MV BUSAN STAR - calling to discharge about 55,000Mt of aggregates.exe.exe windows:4 windows x86 arch:x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 650KB - Virtual size: 649KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ