surtr | e982b7fa2b716df0ea769f3c16b74cf6605e95ff7c549f11827ade4881ec6a84 | Triage

Sharing

General

Target

e982b7fa2b716df0ea769f3c16b74cf6605e95ff7c549f11827ade4881ec6a84
Size

1.0MB
MD5

1a5519309ef13e6988e2e56eeb92b61c
SHA1

8ebae083c0534dba2f298f033889af8766775133
SHA256

e982b7fa2b716df0ea769f3c16b74cf6605e95ff7c549f11827ade4881ec6a84
SHA512

f5975c7daf1de961e61c8b2b01554afac56bf04caaed424b6846d2303917db515f526aed6bdfd42911dfdb11729c033865fd6e8dafe1dfc3c6a0017e7e038178
SSDEEP

24576:DBBzKGHF0bxTCFvXwKr/aISpu4Qc6F3v1HT2BzN2tgGS3YzYhopra2KN:DBV4xTCCu4Qc6/F8qr7KN

Score

10^/10

surtr

Malware Config

Signatures

Detects Surtr Payload 1 IoCs

resource	yara_rule
sample	family_surtr

Surtr family
surtr

Files

e982b7fa2b716df0ea769f3c16b74cf6605e95ff7c549f11827ade4881ec6a84
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 921KB - Virtual size: 921KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ