Static task
static1
Behavioral task
behavioral1
Sample
Proxy Scraper V2_Secure/Proxy Scraper V2.exe
Resource
win10v2004-20230621-en
General
-
Target
X0_ProxyScraper_V2.rar
-
Size
374KB
-
MD5
3f4a11ed10a6577601262f4a0d2ed73f
-
SHA1
19d27c737c5bccaffa070d58075979b749080d01
-
SHA256
462d25eaacc5d613226aecd5dfed34c4a773e12a376866d2b10b4a5f3cb149da
-
SHA512
15e0aa3b499e906aff95988db31b6e628b8c1d6b991b67f869a51c0fb794b22c8939a5ab2a3d63cdb078315f9c4c5c42c3299b3840b8b674286fa9f74d6cd190
-
SSDEEP
6144:nWUWOtpniJ5MiaZsyHseyMMTZ3OKgvfxj2AlFpLBYN5bFA2ToDK9uW8EciAcopRs:nWSCiiaZsyMevMBAnxjtbptobFA2l9uW
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Proxy Scraper V2_Secure/Bunifu_UI_v1.5.3.dll unpack001/Proxy Scraper V2_Secure/Proxy Scraper V2.exe
Files
-
X0_ProxyScraper_V2.rar.rar
-
Proxy Scraper V2_Secure/Bunifu_UI_v1.5.3.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 234KB - Virtual size: 233KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Proxy Scraper V2_Secure/HTTP ALL 10000ms 2023-06-27-47.txt
-
Proxy Scraper V2_Secure/Proxy Scraper V2.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 482KB - Virtual size: 481KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Proxy Scraper V2_Secure/Proxy Scraper V2.pdb