goldenspy | 0402ad03a9be2a0d3c735647fb4f08b5b6a5423d9756519390d5f8cf9a4d7642 | Triage

Sharing

General

Target

0402ad03a9be2a0d3c735647fb4f08b5b6a5423d9756519390d5f8cf9a4d7642
Size

524KB
MD5

dac97bc6a9211ac076d5b0ce4fa89147
SHA1

801c7bf0a3a4a3e3a03a0f2d1eaac6c3533f9645
SHA256

0402ad03a9be2a0d3c735647fb4f08b5b6a5423d9756519390d5f8cf9a4d7642
SHA512

39c94f5060bca7c15c5c09938981f1fcf1529d35e7982abd9c37de92565cfa3cb0e0f612d5d1f9b8781b2dec34bb143598428dd4dbb183232d7390b9f63911a3
SSDEEP

12288:QJ9YFdXP8pxf1HUh9P8EUDUJ1eMWoCeM/DTTRJ:GYasn8EUDUDeMGeM3TR

Score

10^/10

goldenspy

Malware Config

Signatures

GoldenSpy Payload 1 IoCs

Processes:

resource	yara_rule
sample	goldenspy_svm_payload

Goldenspy family
goldenspy

Files

0402ad03a9be2a0d3c735647fb4f08b5b6a5423d9756519390d5f8cf9a4d7642
.exe windows x86

Code Sign

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 358KB - Virtual size: 358KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ