Overview
overview
3Static
static
3Google Dominion.pdf
windows7-x64
1Google Dominion.pdf
windows10-2004-x64
1Instructions.pdf
windows7-x64
1Instructions.pdf
windows10-2004-x64
1SESniperExample.xls
windows7-x64
1SESniperExample.xls
windows10-2004-x64
1SESniperExample.xlsx
windows7-x64
1SESniperExample.xlsx
windows10-2004-x64
1SESniperFormula.xls
windows7-x64
1SESniperFormula.xls
windows10-2004-x64
1SESniperFormula.xlsx
windows7-x64
1SESniperFormula.xlsx
windows10-2004-x64
1MySql.Data.dll
windows7-x64
1MySql.Data.dll
windows10-2004-x64
1SEsniper.exe
windows7-x64
1SEsniper.exe
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Google Dominion.pdf
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Google Dominion.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
Instructions.pdf
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
Instructions.pdf
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
SESniperExample.xls
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
SESniperExample.xls
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
SESniperExample.xlsx
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
SESniperExample.xlsx
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
SESniperFormula.xls
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
SESniperFormula.xls
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
SESniperFormula.xlsx
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
SESniperFormula.xlsx
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
MySql.Data.dll
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
MySql.Data.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
SEsniper.exe
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
SEsniper.exe
Resource
win10v2004-20231215-en
General
-
Target
24afb72b4410eac74a416ebab33fabb4
-
Size
2.0MB
-
MD5
24afb72b4410eac74a416ebab33fabb4
-
SHA1
804543eea8f671f79e8e17dffbb4080c16348588
-
SHA256
28a25cd80c62d8a0f13e093b28bf502a6879a372f1712bee0a8b943036771c8e
-
SHA512
cb1f3a79ab429e5f97bc76b637fe469121a00b29cceb56ceccb17466e8c39c88ba05190246b1a156e08a348315efb518568ffd849c2f301ee89d6e57cec19cb2
-
SSDEEP
49152:Fu2Eato5KeP3CxKdBqymr+/lAAwd3UGg3zswMAqtM37msJZzTz:FNhto5/P3CxFVraWV3rgjsrQzTz
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack005/MySql.Data.dll unpack005/SEsniper.exe
Files
-
24afb72b4410eac74a416ebab33fabb4.rar
-
SEsniper 1.5/SE Sniper Help Files.rar.rar
-
ErrorsandSolutions.txt
-
FAQ.txt
-
Google Dominion.pdf.pdf
-
Instructions.pdf.pdf
-
SESniperExample.xls.xls windows office2003
-
SESniperExample.xlsx.xlsx office2007
-
SESniperFormula.xls.xls windows office2003
-
SESniperFormula.xlsx.xlsx office2007
-
SEsniper 1.5/SEsniper 1.5.zip.zip
-
MySql.Data.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 342KB - Virtual size: 342KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
SEsniper.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 232KB - Virtual size: 229KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 104KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
SEsniper.exe.config.xml
-
app.manifest
-
target2.ico