Static task
static1
Behavioral task
behavioral1
Sample
2Elynyru.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2Elynyru.exe
Resource
win10v2004-20230915-en
General
-
Target
2Elynyru.exe
-
Size
1.7MB
-
MD5
6c8965f1d56a93b0bf67780f7c2fa965
-
SHA1
c3beaf2bf36e40c5e1afb3c0e879ae1d25f02922
-
SHA256
52817df4b19ffc52e81384b3117888fc053326b9635152fcbd7ca62d00801887
-
SHA512
6693d6851842c3693b4fb866e97de0c3e560a5c1776fab6ffae17af5c814b723f5284f756cdc396149645a61821a698548ef159dd424b85e5842d4d74cf84b22
-
SSDEEP
49152:WBRmRJuZoLIEk0zZVACftmxN4akoFc0y6sFzxT:WZ/R0VAMmx/FldsdT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 2Elynyru.exe
Files
-
2Elynyru.exe.exe windows:4 windows x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 37KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sqpuqkoi Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sgdnyuor Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE