Behavioral task
behavioral1
Sample
SNU/ConvAll.bat
Resource
win11-20240214-en
Behavioral task
behavioral2
Sample
SNU/wav.exe
Resource
win11-20240221-en
General
-
Target
SNU.rar
-
Size
2.0MB
-
MD5
31d5073afe010323b381abe4e24b4a7c
-
SHA1
a2b6255afd8fb87555ae88eeb5f1f98995b66e7d
-
SHA256
a009b43bcaaef3eb88414f0486493cf3be5061ec2e903df1d570a499e948aa5c
-
SHA512
6e17d525ad66b8a63be7dd705d5fa102742113fe153c04a76d2e01a44d10ec1350e10d6535d42c5322fe8b9b84f6019e46b2f5bff0e1d5d7151c1c8dff383f92
-
SSDEEP
49152:X7zLN22/0ZZSumfXjZow7iZWUeLrg20+AKX:XRQGNfzZXiZWU4g7HA
Malware Config
Signatures
-
resource yara_rule static1/unpack001/SNU/wav.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/SNU/wav.exe
Files
-
SNU.rar.rar
-
SNU/ConvAll.bat
-
SNU/amb_grav_tether_shake_quad.exa.snu
-
SNU/wav.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 516KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE