Static task
static1
Behavioral task
behavioral1
Sample
Firefly.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Firefly.exe
Resource
win10v2004-20240412-en
General
-
Target
Firefly.exe
-
Size
7.2MB
-
MD5
c5ccf171be0afa6d9a1092bac9cb0b96
-
SHA1
5a2fdbda3acb7a52152bc1472871f09d3624b2a1
-
SHA256
70b933e76310295d4f74af8a60e3295561858d649366a3ae967c512e10427c73
-
SHA512
748c36c8bedfa471b02ead81e0cb7b20e0b11f4b8d84360e8f72215b069ec8191e8ddbfa80d61ecbac404a0bc68d73be145013e44e581d1c5268782b1c87f7b2
-
SSDEEP
98304:B7//YITF8r2n8TevxbFKVlXk34tZ+t4+aNG5Lhd+2G4Op0cN+hmdYkvsFLL6:B7//1xBVqvG5dQ2m0cN+hmdYkvsFLL6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Firefly.exe
Files
-
Firefly.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 7.0MB - Virtual size: 7.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 146KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ