Static task
static1
General
-
Target
Desktop Goose.app.zip
-
Size
14.3MB
-
MD5
8e24cd2b45c74416fee04f245d0fe894
-
SHA1
b18d6a6b72ef41dd53fd36cf6f9462cc20cdaa51
-
SHA256
b7156c084cf45d0de7ad00e9b26bc0ccdb9aa47caeb534b64a6a4bcef8445be9
-
SHA512
7170bf9724a1ed84b73b3455b30b394a72773f19549b0d597f27157f9c83a46cbccfd33c46b88d653a64e49bfbd3904be530e50164efa8d58fdec471060d1a29
-
SSDEEP
393216:CoUQoKOcj8ziAxy/i7IULVPxBgpoB3Yuo3i6ChmrMIPTCqwNO:fukqx2ULVEpoSuo3LHI2Xwg
Malware Config
Signatures
Files
-
Desktop Goose.app.zip.zip
-
Desktop Goose.app/Contents/CodeResources
-
Desktop Goose.app/Contents/Info.plist
-
Desktop Goose.app/Contents/MacOS/Desktop Goose.macho macos
-
Desktop Goose.app/Contents/MonoBundle/Desktop Goose.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Desktop Goose.app/Contents/MonoBundle/Mono.Security.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 234KB - Virtual size: 233KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 972B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Desktop Goose.app/Contents/MonoBundle/System.Configuration.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Desktop Goose.app/Contents/MonoBundle/System.Core.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Desktop Goose.app/Contents/MonoBundle/System.Drawing.Common.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 154KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Desktop Goose.app/Contents/MonoBundle/System.Net.Http.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 273KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Desktop Goose.app/Contents/MonoBundle/System.Numerics.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Desktop Goose.app/Contents/MonoBundle/System.Security.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 306KB - Virtual size: 306KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Desktop Goose.app/Contents/MonoBundle/System.Xml.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Desktop Goose.app/Contents/MonoBundle/System.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Desktop Goose.app/Contents/MonoBundle/Xamarin.Mac.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 20.7MB - Virtual size: 20.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Desktop Goose.app/Contents/MonoBundle/config
-
Desktop Goose.app/Contents/MonoBundle/libMonoPosixHelper.dylib.macho macos
-
Desktop Goose.app/Contents/MonoBundle/libmono-native.dylib.macho macos
-
Desktop Goose.app/Contents/MonoBundle/machine.config.xml
-
Desktop Goose.app/Contents/MonoBundle/mscorlib.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 4.4MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Desktop Goose.app/Contents/PkgInfo
-
Desktop Goose.app/Contents/Resources/AppIcon.icns
-
Desktop Goose.app/Contents/Resources/Assets.car
-
Desktop Goose.app/Contents/Resources/BITE.mp3
-
Desktop Goose.app/Contents/Resources/DesktopGoose.sdef
-
Desktop Goose.app/Contents/Resources/DonatePage.png.png
-
Desktop Goose.app/Contents/Resources/Honk1.mp3
-
Desktop Goose.app/Contents/Resources/Honk2.mp3
-
Desktop Goose.app/Contents/Resources/Honk3.mp3
-
Desktop Goose.app/Contents/Resources/Honk4.mp3
-
Desktop Goose.app/Contents/Resources/MacAbout.png.png
-
Desktop Goose.app/Contents/Resources/Memes/GooseDance.gif.gif
-
Desktop Goose.app/Contents/Resources/Memes/Meme1.png.png
-
Desktop Goose.app/Contents/Resources/Memes/Meme2.png.png
-
Desktop Goose.app/Contents/Resources/Memes/Meme3.png.png
-
Desktop Goose.app/Contents/Resources/Memes/Meme4.png.png
-
Desktop Goose.app/Contents/Resources/Memes/Meme5.png.png
-
Desktop Goose.app/Contents/Resources/Memes/Meme6.png.png
-
Desktop Goose.app/Contents/Resources/Memes/Meme7.png.png
-
Desktop Goose.app/Contents/Resources/MudSquith.mp3
-
Desktop Goose.app/Contents/Resources/Notes/Note1.txt
-
Desktop Goose.app/Contents/Resources/Notes/Note2.txt
-
Desktop Goose.app/Contents/Resources/Notes/Note3.txt
-
Desktop Goose.app/Contents/Resources/Notes/Note4.txt
-
Desktop Goose.app/Contents/Resources/Notes/Note5.txt
-
Desktop Goose.app/Contents/Resources/Notes/Note6.txt
-
Desktop Goose.app/Contents/Resources/Pat1.wav
-
Desktop Goose.app/Contents/Resources/Pat2.wav
-
Desktop Goose.app/Contents/Resources/Pat3.wav
-
Desktop Goose.app/Contents/Resources/PreferencesWindow.nib
-
Desktop Goose.app/Contents/Resources/archived-expanded-entitlements.xcent.xml
-
Desktop Goose.app/Contents/Resources/runtime-options.plist.xml
-
Desktop Goose.app/Contents/_CodeSignature/CodeResources.xml
-
__MACOSX/Desktop Goose.app/._Contents
-
__MACOSX/Desktop Goose.app/Contents/._CodeResources
-
__MACOSX/Desktop Goose.app/Contents/._Info.plist
-
__MACOSX/Desktop Goose.app/Contents/._MacOS
-
__MACOSX/Desktop Goose.app/Contents/._MonoBundle
-
__MACOSX/Desktop Goose.app/Contents/._PkgInfo
-
__MACOSX/Desktop Goose.app/Contents/._Resources
-
__MACOSX/Desktop Goose.app/Contents/.__CodeSignature
-
__MACOSX/Desktop Goose.app/Contents/MacOS/._Desktop Goose
-
__MACOSX/Desktop Goose.app/Contents/MonoBundle/._Desktop Goose.exe
-
__MACOSX/Desktop Goose.app/Contents/MonoBundle/._Mono.Security.dll
-
__MACOSX/Desktop Goose.app/Contents/MonoBundle/._System.Configuration.dll
-
__MACOSX/Desktop Goose.app/Contents/MonoBundle/._System.Core.dll
-
__MACOSX/Desktop Goose.app/Contents/MonoBundle/._System.Drawing.Common.dll
-
__MACOSX/Desktop Goose.app/Contents/MonoBundle/._System.Net.Http.dll
-
__MACOSX/Desktop Goose.app/Contents/MonoBundle/._System.Numerics.dll
-
__MACOSX/Desktop Goose.app/Contents/MonoBundle/._System.Security.dll
-
__MACOSX/Desktop Goose.app/Contents/MonoBundle/._System.Xml.dll
-
__MACOSX/Desktop Goose.app/Contents/MonoBundle/._System.dll
-
__MACOSX/Desktop Goose.app/Contents/MonoBundle/._Xamarin.Mac.dll
-
__MACOSX/Desktop Goose.app/Contents/MonoBundle/._config
-
__MACOSX/Desktop Goose.app/Contents/MonoBundle/._libMonoPosixHelper.dylib
-
__MACOSX/Desktop Goose.app/Contents/MonoBundle/._libmono-native.dylib
-
__MACOSX/Desktop Goose.app/Contents/MonoBundle/._machine.config
-
__MACOSX/Desktop Goose.app/Contents/MonoBundle/._mscorlib.dll
-
__MACOSX/Desktop Goose.app/Contents/Resources/._AppIcon.icns
-
__MACOSX/Desktop Goose.app/Contents/Resources/._Assets.car
-
__MACOSX/Desktop Goose.app/Contents/Resources/._BITE.mp3
-
__MACOSX/Desktop Goose.app/Contents/Resources/._DesktopGoose.sdef
-
__MACOSX/Desktop Goose.app/Contents/Resources/._DonatePage.png
-
__MACOSX/Desktop Goose.app/Contents/Resources/._Honk1.mp3
-
__MACOSX/Desktop Goose.app/Contents/Resources/._Honk2.mp3
-
__MACOSX/Desktop Goose.app/Contents/Resources/._Honk3.mp3
-
__MACOSX/Desktop Goose.app/Contents/Resources/._Honk4.mp3
-
__MACOSX/Desktop Goose.app/Contents/Resources/._MacAbout.png
-
__MACOSX/Desktop Goose.app/Contents/Resources/._Memes
-
__MACOSX/Desktop Goose.app/Contents/Resources/._MudSquith.mp3
-
__MACOSX/Desktop Goose.app/Contents/Resources/._Notes
-
__MACOSX/Desktop Goose.app/Contents/Resources/._Pat1.wav
-
__MACOSX/Desktop Goose.app/Contents/Resources/._Pat2.wav
-
__MACOSX/Desktop Goose.app/Contents/Resources/._Pat3.wav
-
__MACOSX/Desktop Goose.app/Contents/Resources/._PreferencesWindow.nib
-
__MACOSX/Desktop Goose.app/Contents/Resources/._archived-expanded-entitlements.xcent
-
__MACOSX/Desktop Goose.app/Contents/Resources/._runtime-options.plist
-
__MACOSX/Desktop Goose.app/Contents/Resources/Memes/._GooseDance.gif
-
__MACOSX/Desktop Goose.app/Contents/Resources/Memes/._Meme1.png
-
__MACOSX/Desktop Goose.app/Contents/Resources/Memes/._Meme2.png
-
__MACOSX/Desktop Goose.app/Contents/Resources/Memes/._Meme3.png
-
__MACOSX/Desktop Goose.app/Contents/Resources/Memes/._Meme4.png
-
__MACOSX/Desktop Goose.app/Contents/Resources/Memes/._Meme5.png
-
__MACOSX/Desktop Goose.app/Contents/Resources/Memes/._Meme6.png
-
__MACOSX/Desktop Goose.app/Contents/Resources/Memes/._Meme7.png
-
__MACOSX/Desktop Goose.app/Contents/Resources/Notes/._Note1.txt
-
__MACOSX/Desktop Goose.app/Contents/Resources/Notes/._Note2.txt
-
__MACOSX/Desktop Goose.app/Contents/Resources/Notes/._Note3.txt
-
__MACOSX/Desktop Goose.app/Contents/Resources/Notes/._Note4.txt
-
__MACOSX/Desktop Goose.app/Contents/Resources/Notes/._Note5.txt
-
__MACOSX/Desktop Goose.app/Contents/Resources/Notes/._Note6.txt
-
__MACOSX/Desktop Goose.app/Contents/_CodeSignature/._CodeResources