Static task
static1
Behavioral task
behavioral1
Sample
11.zip
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
11.zip
Resource
win10v2004-20230220-en
General
-
Target
11.zip
-
Size
544KB
-
MD5
3601f4f670942513a23acbc65c5711b2
-
SHA1
e38e3652e874806bead548aa95bb58a9bfe72148
-
SHA256
279fe5acc2f39cd530dc195ec8e4793ae2478b8a4c0bdfb462a89ff159b4b014
-
SHA512
6d9d2fcd5a00f13897b0ca2fbdfd0f784fd047919973b4e502cd12bcd5c00e210aed76bed3efe9d8e62c308d1346aaf631ca0541ccf72c7ed7c4b0c4528cb495
-
SSDEEP
12288:R0QTnFBpZsUrHMD0Xd/vl0+BU6z49e/G/46w:RbTFBrsuHw0xK+BR3/G/4P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/MegnusX_Mega.nz_Checker.exe
Files
-
11.zip.zip
-
MegnusX_Mega.nz_Checker.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 386KB - Virtual size: 386KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
final_merge.txt