Overview
overview
3Static
static
3speederv2.exe
windows10-2004-x64
1speederv2_amd64
windows10-2004-x64
1speederv2_arm
windows10-2004-x64
1speederv2_mac
windows10-2004-x64
1speederv2_mac_m1
windows10-2004-x64
1speederv2_mips24kc_be
windows10-2004-x64
1speederv2_mips24kc_le
windows10-2004-x64
1speederv2_wepoll.exe
windows10-2004-x64
1speederv2_x86
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
speederv2.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral2
Sample
speederv2_amd64
Resource
win10v2004-20231020-en
Behavioral task
behavioral3
Sample
speederv2_arm
Resource
win10v2004-20231023-en
Behavioral task
behavioral4
Sample
speederv2_mac
Resource
win10v2004-20231023-en
Behavioral task
behavioral5
Sample
speederv2_mac_m1
Resource
win10v2004-20231020-en
Behavioral task
behavioral6
Sample
speederv2_mips24kc_be
Resource
win10v2004-20231020-en
Behavioral task
behavioral7
Sample
speederv2_mips24kc_le
Resource
win10v2004-20231025-en
Behavioral task
behavioral8
Sample
speederv2_wepoll.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral9
Sample
speederv2_x86
Resource
win10v2004-20231020-en
General
-
Target
speederv2_binaries.tar.gz
-
Size
7.6MB
-
MD5
e9d17ce59ff31866469f42aa5565c815
-
SHA1
39ee5b6826360a1ac79655edab1fa37f708b7d8f
-
SHA256
b64dd376a948995cb5da17d8eb171338ccd0553b9380e5164f8cb5ac4131bcaa
-
SHA512
e1f7ad965dc695da9031195771ee82aca6dfef9a362ac4599589860eba76d739b65c7b0c0aaadf68b0fda67dfde733c0fe96e466ed43825e81db0b0781b111b1
-
SSDEEP
196608:zB4kyHuPs8EtZDsfNqIS7G89+WYSCOSkGw3/A6TP5U44:9fNEPDqNqTf9+pSBSZw3B+L
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack002/speederv2.exe unpack002/speederv2_wepoll.exe
Files
-
speederv2_binaries.tar.gz.gz
-
sample.tar
-
speederv2.exe.exe windows:4 windows x86 arch:x86
0741f048edfdd50e74483c8cae723c82
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
FileTimeToSystemTime
FormatMessageW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetHandleInformation
GetLastError
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetProcessAffinityMask
GetProcessTimes
GetStartupInfoA
GetSystemTimeAdjustment
GetSystemTimeAsFileTime
GetThreadContext
GetThreadPriority
GetThreadTimes
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
IsDebuggerPresent
LeaveCriticalSection
LocalFree
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReleaseSemaphore
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
SetEvent
SetLastError
SetProcessAffinityMask
SetSystemTime
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
msvcrt
__argv
__dllonexit
__getmainargs
__initenv
__lconv_init
__mb_cur_max
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_beginthreadex
_cexit
_endthreadex
_errno
_exit
_fmode
_initterm
_iob
_lock
_onexit
_setjmp3
_setmaxstdio
_snwprintf
time
localtime
_ultoa
_unlock
calloc
exit
fclose
fflush
fopen
fprintf
fputc
fputs
free
fwprintf
fwrite
getenv
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
perror
printf
putchar
puts
raise
rand
realloc
setlocale
signal
sprintf
sscanf
strchr
strcmp
strcpy
strerror
strftime
strlen
strncmp
strncpy
strtok
strtoul
abort
vfprintf
wcscpy
wcslen
atoi
_stati64
longjmp
_write
_strdup
_read
_fileno
_dup2
_close
user32
MessageBoxW
ws2_32
WSAAddressToStringA
WSACleanup
WSAGetLastError
WSARecv
WSASend
WSAStartup
WSAStringToAddressA
__WSAFDIsSet
accept
bind
closesocket
connect
getpeername
getsockname
htonl
htons
inet_ntoa
ioctlsocket
listen
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
socket
Sections
.text Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/19 Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/31 Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/45 Size: 86KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/57 Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/70 Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/81 Size: 255KB - Virtual size: 254KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/92 Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
speederv2_amd64.elf linux x64
-
speederv2_arm.elf linux arm
-
speederv2_mac.macho macos arch:x64
-
speederv2_mac_m1.macho macos arch:arm64
-
speederv2_mips24kc_be.elf linux mipsbe
-
speederv2_mips24kc_le.elf linux mipsel
-
speederv2_wepoll.exe.exe windows:4 windows x86 arch:x86
0ce4b9f6732ae74d35b4500f606b47d6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AcquireSRWLockExclusive
AcquireSRWLockShared
AddVectoredExceptionHandler
CancelIoEx
CloseHandle
CreateEventA
CreateIoCompletionPort
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
FormatMessageW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetHandleInformation
GetLastError
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetProcessAffinityMask
GetQueuedCompletionStatusEx
GetStartupInfoA
GetSystemTimeAsFileTime
GetThreadContext
GetThreadPriority
GetTickCount64
GetTickCount
InitOnceExecuteOnce
InitializeCriticalSection
InitializeSRWLock
IsDebuggerPresent
LeaveCriticalSection
LocalFree
OutputDebugStringA
QueryPerformanceCounter
RaiseException
ReleaseSRWLockExclusive
ReleaseSRWLockShared
ReleaseSemaphore
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
SetEvent
SetHandleInformation
SetLastError
SetProcessAffinityMask
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
msvcrt
__argv
__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_beginthreadex
_cexit
_endthreadex
_errno
_exit
_fmode
_initterm
_iob
_lock
_onexit
_setjmp3
_setmaxstdio
_snwprintf
time
localtime
_ultoa
_unlock
calloc
exit
fclose
fflush
fopen
fprintf
fputc
fputs
free
fwprintf
fwrite
getenv
malloc
memchr
memcmp
memcpy
memmove
memset
perror
printf
putchar
puts
raise
rand
realloc
signal
sprintf
sscanf
strchr
strcmp
strcpy
strerror
strftime
strlen
strncmp
strncpy
strtok
strtoul
abort
vfprintf
wcscpy
atoi
_stati64
longjmp
_write
_strdup
_read
_fileno
_dup2
_close
user32
MessageBoxW
ws2_32
WSAAddressToStringA
WSACleanup
WSAEnumProtocolsW
WSAGetLastError
WSAIoctl
WSARecv
WSASend
WSASocketW
WSAStartup
WSAStringToAddressA
accept
bind
closesocket
connect
getpeername
getsockname
htonl
htons
inet_ntoa
ioctlsocket
listen
ntohl
ntohs
recv
recvfrom
send
sendto
setsockopt
socket
Sections
.text Size: 266KB - Virtual size: 266KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/19 Size: 5.9MB - Virtual size: 5.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/31 Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/45 Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/57 Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/70 Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/81 Size: 249KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/92 Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
speederv2_x86.elf linux x86
-
version.txt