Static task
static1
Behavioral task
behavioral1
Sample
Theseus.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Theseus.exe
Resource
win10v2004-20230221-en
General
-
Target
Theseus.exe
-
Size
417KB
-
MD5
191d0556391ef4a84c689688fa82268a
-
SHA1
5275a2a8a73e032b46ddc48392958c8b9e4da2d2
-
SHA256
07cbb6de44979bfff5cb1b5b402ceb8c436e6aba4011ca8c9e58f0ab5fc18637
-
SHA512
41aad0852e1f719e880fc896674ecdd639f00a9cdceee630791988c73a9f2590c94955036c82b8da5a0ace04fc87a521817feaffc0cc2f655d49cabeb6ae509b
-
SSDEEP
12288:q2/mmjzs/PHjDfj5894Y4IXShgaRSHsDr:BVjzsnHX3lIXSm8D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Theseus.exe
Files
-
Theseus.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 221KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 11KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 18KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 119KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE