Behavioral task
behavioral1
Sample
spider.exe
Resource
win10v2004-20230831-en
General
-
Target
spider.exe
-
Size
9.2MB
-
MD5
a7708a948fdd2a7834a3ec06d576c040
-
SHA1
e1b6a9fa0aefc76447a150ea84e2cb9b9d64b318
-
SHA256
24238507dfb39a738c73ab87db5d839b4fde96a87c9556ee80e75f7a355c2ade
-
SHA512
9eaaa70722c7e72bc713a7ac4604972bddcd56e644104f4c7f5eff8a735848b181e8cce671d2a1c6006abdf8db06bdff8ed2bdc7db4d9ecc1d3a1edeca6d6ad1
-
SSDEEP
196608:Njgr7PnILLZWdoCOiv4FMIZETKejPePdrQJ/BNOq+jYPC:ar7M5livQETKevJHOq+jn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource spider.exe
Files
-
spider.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 276KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
spider.pyc