Static task
static1
Behavioral task
behavioral1
Sample
de965e33dff58cf011106feacef2f804d9e35d00b8b5ff7064e5b7afee46d72c.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
de965e33dff58cf011106feacef2f804d9e35d00b8b5ff7064e5b7afee46d72c.exe
Resource
win10-en-20211208
General
-
Target
de965e33dff58cf011106feacef2f804d9e35d00b8b5ff7064e5b7afee46d72c
-
Size
6KB
-
MD5
4da2c2abcf1df9749b64b34160bd3ebf
-
SHA1
4e2f18ce03f6ed655a201833e0b586a845e31e86
-
SHA256
de965e33dff58cf011106feacef2f804d9e35d00b8b5ff7064e5b7afee46d72c
-
SHA512
c372c719e61459fe1a8b1b3ed93f714e22128fb920eff55764e44774051ec0bf7d8cd50f4b82f592988d02b585eeac8017c5406bafd298ac02d03c58a13c7d0c
-
SSDEEP
96:RwxUedxDrulnLat5h3iEVlroikW23Whx:RLsgLat50EVpoPW23W
Malware Config
Signatures
-
Detect PseudoManuscrypt loader dropped by the installer 1 IoCs
Processes:
resource yara_rule sample family_pseudomanuscrypt -
Pseudomanuscrypt family
Files
-
de965e33dff58cf011106feacef2f804d9e35d00b8b5ff7064e5b7afee46d72c.exe windows x64
Code Sign
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 64B - Virtual size: 5B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ