Static task
static1
Behavioral task
behavioral1
Sample
sylvora.exe
Resource
macos-20230831-en
General
-
Target
sylvora.exe
-
Size
12.0MB
-
MD5
8d468e986775fb44512daff2cab700eb
-
SHA1
2e79c1cb7425fa4c047508f09f4b41237170f145
-
SHA256
26c89ba610f033dd4fc265fcfa1b5cbc7b30a20c7aba5a8f8580e3fcda2aecfa
-
SHA512
028cbb813ed95fd9900be76a700d4dd8564b471958923873c31c921779dbd52e7bcb5b4214b02f775d6ca2ac384b3be8aa641d090fb2d685c4b367217d829b43
-
SSDEEP
196608:adYysiTbskwKbgba4h32B8+RCKzkXq0KmoJeOgqfqWzkuGEUw2WXAJxkx:Ysi1bN6GBXRpB9JbyWwuxUr6ADa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource sylvora.exe
Files
-
sylvora.exe.exe windows x86
8b8d692afc0393fa1fa4974e9386e031
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
malloc
shell32
ShellExecuteA
kernel32
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
CharUpperBuffW
Sections
.text Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 4B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.3E< Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.$[j Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.d[/ Size: 12.0MB - Virtual size: 12.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 759B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ