Static task
static1
Behavioral task
behavioral1
Sample
MechanicalTenderingEngineerInfrastructure.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
MechanicalTenderingEngineerInfrastructure.exe
Resource
win10v2004-20241007-en
General
-
Target
MechanicalTenderingEngineerInfrastructure.exe
-
Size
821KB
-
MD5
429c7a3322bd34eafacec92baba5ec09
-
SHA1
61bbaec2ed91d5885cb2ee21e23b781ac91824d9
-
SHA256
071d0a5405c4bc0d3319aa4756ad6afb703c8462d1a6d616765eeae22dcdbd30
-
SHA512
8181ee44d934d6303f4ad2414741d4b422cdc2b038332ed13330bc6c8b3eb75d57dd1905a976a24ba40a78a2634c11539338db141ada5e4e810c2bef464c4d33
-
SSDEEP
12288:qKY00jgMZ9+x/KDUBfssWfQoIGEcFC/oqE1TqIKqmuUN93ANpe0:qKdjMZ9+x/pBEDfycFC/A1tZmV3el
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource MechanicalTenderingEngineerInfrastructure.exe
Files
-
MechanicalTenderingEngineerInfrastructure.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 804KB - Virtual size: 804KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ