AnubisV3 VIP[.]zip

General

Target

AnubisV3 VIP.zip
Size

7.5MB
MD5

1f1c52f6b82f8ce77c7935b5b978b9f3
SHA1

ea063daa96df657bd2cce1a37a51d3a5d1317dd3
SHA256

398d6c90a0843fe30088c5593000e7663cfdccbefe555f57ea127f8ea7df58d5
SHA512

c06881cd9d2797f662ee1d8640f2baa3fa52d25dc63016d34be6762cd5751ca9284e810d25eb2d19ac3016ef5ed54a6d3e17ff2f51cb8f768c103a59e9354928
SSDEEP

98304:7DyQ2l3ZycwplfUoabJ5kI16BKaq8rhEs55jqng75em90I7QAzMfxzF/cdeuxn8E:PUls/MvkI16BVqYzjzyF/M7RJxP

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/AnubisV3 VIP/Anubis.builder.exe
unpack001/AnubisV3 VIP/libraryx

Files

AnubisV3 VIP.zip
.zip

Password: Hackmehaha4265
AnubisV3 VIP/Anubis.builder.exe
.exe windows x86

Password: Hackmehaha4265

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

9i&(]
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 7.3MB - Virtual size: 7.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tFGJ
Size: 512B - Virtual size: 134B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

<RNzOV>
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.null
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AnubisV3 VIP/libraryx
.exe windows x86

Password: Hackmehaha4265

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: Hackmehaha4265

Password: Hackmehaha4265

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

9i&(] Size: 150KB - Virtual size: 149KB

.text Size: 7.3MB - Virtual size: 7.3MB

.rsrc Size: 79KB - Virtual size: 79KB

.tFGJ Size: 512B - Virtual size: 134B

<RNzOV> Size: 512B - Virtual size: 16B

.null Size: 512B - Virtual size: 276B

.reloc Size: 512B - Virtual size: 12B

Password: Hackmehaha4265

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 229KB - Virtual size: 229KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

9i&(]
Size: 150KB - Virtual size: 149KB

.text
Size: 7.3MB - Virtual size: 7.3MB

.rsrc
Size: 79KB - Virtual size: 79KB

.tFGJ
Size: 512B - Virtual size: 134B

<RNzOV>
Size: 512B - Virtual size: 16B

.null
Size: 512B - Virtual size: 276B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 229KB - Virtual size: 229KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B