goldenspy | ce3d64f8ad4dcbbf5324e05c81a716c5d2493e149edafbc5cb73c01836bea5f2 | Triage

Sharing

General

Target

ce3d64f8ad4dcbbf5324e05c81a716c5d2493e149edafbc5cb73c01836bea5f2
Size

563KB
MD5

8497a9301e74d3611c2df3e3c0ea24f4
SHA1

6dc1b20996b36e9dfc1edaaec880b6efd8151012
SHA256

ce3d64f8ad4dcbbf5324e05c81a716c5d2493e149edafbc5cb73c01836bea5f2
SHA512

4eabb03f6d8bd0c00fcadd989fdf0e904f39aad5ab7e627c00ca793fdce052c3bd343bcc65b6d323c1d00f13d6b4b2f738be9c0c10438594a0f1699fe6c8787f
SSDEEP

12288:2CDP7bIcq/Hs3fOmj+5NM6jXDk8Ts3FBvRP+8mboaQHt3nHiXGYGeQgQ:2I4hmi5NopRUm3CHGbgQ

Score

10^/10

goldenspy

Malware Config

Signatures

GoldenSpy Payload 1 IoCs

Processes:

resource	yara_rule
sample	goldenspy_svm_payload

Goldenspy family
goldenspy

Files

ce3d64f8ad4dcbbf5324e05c81a716c5d2493e149edafbc5cb73c01836bea5f2
.exe windows x86

Code Sign

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 493KB - Virtual size: 492KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 489KB - Virtual size: 488KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ