Static task
static1
Behavioral task
behavioral1
Sample
086apollo.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
086apollo.exe
Resource
win10v2004-20230220-en
General
-
Target
086apollo.exe
-
Size
2.8MB
-
MD5
5f95b14191b05a87887ed223c8569b44
-
SHA1
ce2b29e5167c628f485409816d9dbb5a9b4bcf8a
-
SHA256
9b91e4f100dbe1c529ff81595cbcb6fd1057c4c6a9c47537a49f719cbba45155
-
SHA512
bead1ca40f13f2a36debe2126bd965d2be5ed85e0a4397b4e6dc5b46e8796bd39a23701fe4bf8cb53127e7cf53872ac1ae9cb206ffc3e9b57aa7dec34e73273c
-
SSDEEP
49152:5is1VXeIxSzv+l/KtpcAD7Cb2aKF6kaGPyxwPgaX6rGwcYKOoNz+iM2y:593VBUHLD+MMkvPrPOrGwtKPz+iM2y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 086apollo.exe
Files
-
086apollo.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ