Static task
static1
Behavioral task
behavioral1
Sample
MV ANNA SCHULTE.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
MV ANNA SCHULTE.exe
Resource
win10v2004-20241007-en
General
-
Target
bd91f4d772bbcd54a8e4aa66fc0a522b24a8a8576481aaa44f66dee04eb76f4b
-
Size
299KB
-
MD5
19d89287946c2857046db3f77eacd3b3
-
SHA1
b66894e29204fd323364aa70a08105a3f204a1bc
-
SHA256
bd91f4d772bbcd54a8e4aa66fc0a522b24a8a8576481aaa44f66dee04eb76f4b
-
SHA512
831b4889a6db5be87d05f23a48e58901544229e4e73f9875214d249e743800f3cfb8267a5b41f7acab5a4e0cf932ace2372690be68da72def16e6948171be11e
-
SSDEEP
6144:two3Yk63KoWPkRul/KJ9EAo/V0TVmfOI5gkmP2ooj8E:twzkGp3J9CqTVrIKXoIE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/MV ANNA SCHULTE.exe
Files
-
bd91f4d772bbcd54a8e4aa66fc0a522b24a8a8576481aaa44f66dee04eb76f4b.zip
-
MV ANNA SCHULTE.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 575KB - Virtual size: 574KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ