Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.BackDoor.Butter.10654.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.BackDoor.Butter.10654.exe
Resource
win10v2004-20230915-en
General
-
Target
SecuriteInfo.com.BackDoor.Butter.10654.14364
-
Size
302KB
-
MD5
ee6ce6deff9ff0f2961d0808a413136b
-
SHA1
11ec4d531eea28168230b2a589c19e00887d9518
-
SHA256
afdcdb953092b5debf0dd0f2205e04a8046749928ca3e5c4cb995e4e567f074b
-
SHA512
45c8b111cdd1c134f58cb1329264dbd5f967ecc67a2285cea305414ccdf3e224444de7689e68092bdbe29b9a5134b0eaf28b4954e656482e035575a450f95b7a
-
SSDEEP
6144:LYn9cvTxUS0jWBenoG05toPSjXAjZ60qfBpfDBuuzwQw5a3Ap6ogN7FXb5E6aSY:LYn9ENUHoLdtagymBp9SQwnp6okpXKmY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.BackDoor.Butter.10654.14364
Files
-
SecuriteInfo.com.BackDoor.Butter.10654.14364.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
hao0 Size: - Virtual size: 680KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hao1 Size: 302KB - Virtual size: 307KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE