Overview
overview
7Static
static
7Tool hub (2).zip
windows10-2004-x64
1Tool hub (2).zip
windows11-21h2-x64
1Tool hub/Stormy.exe
windows10-2004-x64
1Tool hub/Stormy.exe
windows11-21h2-x64
1Tool hub/g...me.txt
windows10-2004-x64
1Tool hub/g...me.txt
windows11-21h2-x64
3Tool hub/imgui.ini
windows10-2004-x64
1Tool hub/imgui.ini
windows11-21h2-x64
3Behavioral task
behavioral1
Sample
Tool hub (2).zip
Resource
win10v2004-20240419-en
Behavioral task
behavioral2
Sample
Tool hub (2).zip
Resource
win11-20240419-en
Behavioral task
behavioral3
Sample
Tool hub/Stormy.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral4
Sample
Tool hub/Stormy.exe
Resource
win11-20240419-en
Behavioral task
behavioral5
Sample
Tool hub/guide help read me.txt
Resource
win10v2004-20240426-en
Behavioral task
behavioral6
Sample
Tool hub/guide help read me.txt
Resource
win11-20240419-en
Behavioral task
behavioral7
Sample
Tool hub/imgui.ini
Resource
win10v2004-20240419-en
Behavioral task
behavioral8
Sample
Tool hub/imgui.ini
Resource
win11-20240419-en
General
-
Target
Tool hub (2).zip
-
Size
56.3MB
-
MD5
ad13f31fe332eb8184f138d7c0b6eac7
-
SHA1
9771b2407bb0973e3c894f48e4259298f4638436
-
SHA256
66bfdadeeb4ac73cc39571eb40222421ed94f69f778f352414b2a29967c19053
-
SHA512
d38b1ebac766a3f5b451e6bc4920288833a71d2ab40bc69b2f2085ae340f9030717e61eda82da77b218eb7d74364f98e24ef2c4d5be9cd8c021e62935652f3d2
-
SSDEEP
1572864:XXT7s0SUzr3TCaobbhkriP0ei2dROFOOQdd28I:XX3xzLT1ofVP0ei2dw98I
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Tool hub/Stormy.exe themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Tool hub/Stormy.exe
Files
-
Tool hub (2).zip.zip
-
Tool hub/Stormy.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 513KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 97KB - Virtual size: 222KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 9.3MB - Virtual size: 9.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 22KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 101.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 47.4MB - Virtual size: 47.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 16B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
-
Tool hub/guide help read me.txt
-
Tool hub/imgui.ini