matiex | 1696-60-0x0000000000400000-0x0000000000482000-memory[.]dmp | Triage

Sharing

General

Target

1696-60-0x0000000000400000-0x0000000000482000-memory.dmp
Size

520KB
MD5

7083f527dc1f7b9336a307853285e40e
SHA1

7d5c380b7b2a9a05ffcfabe6237d4833abeb874a
SHA256

efc3844dd0f189addfc6ec2b90dae71cb9e2887ec2c4d2082ce6a2ef6d0f6378
SHA512

3630753aeb248ae00e84b9385923d3b28817063393d267227200f4327fddf8c38dd6ea2e761760ff74b9da04aab48d6ffcf5cfcbc4de4ddf4b217ed02c5c7ee6
SSDEEP

6144:YZCjvCYoXL9Ejmuj9ESFhg+S8IAsZ0ah:zvYEjmOj/IAY0a

Score

10^/10

matiex

Malware Config

Signatures

Matiex Main payload 1 IoCs

resource	yara_rule
sample	family_matiex

Matiex family
matiex

Files

1696-60-0x0000000000400000-0x0000000000482000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 435KB - Virtual size: 434KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ