matiex | 1736-59-0x0000000000400000-0x0000000000482000-memory[.]dmp | Triage

Sharing

General

Target

1736-59-0x0000000000400000-0x0000000000482000-memory.dmp
Size

520KB
MD5

bff6e2f739c20601e6ca6dace1e939fb
SHA1

6706f81d42d03cb4d18d73bed4e96003aad7dd30
SHA256

3124d486329112e989de4713cea8a0d8949f0a8d6c55a5a24816066f21214c73
SHA512

3abd0ba409f226f34e76b351659aadad98aa8f058a7851367bba3033f05da161cff9663e59f46b10502ba21431ce90b1cee701ef19495d9658bdb87fe7fca7e2
SSDEEP

6144:YZCjyCsiXL9Ejmuj9ESFhg+S8IAsZ0ah:zyWEjmOj/IAY0a

Score

10^/10

matiex

Malware Config

Signatures

Matiex Main payload 1 IoCs

resource	yara_rule
sample	family_matiex

Matiex family
matiex

Files

1736-59-0x0000000000400000-0x0000000000482000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 435KB - Virtual size: 434KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ