latrodectus | 7040402574a686f031c3af5fed37509d8979855397787aab70b2d1059099d2da[.]exe

General

Target
7040402574a686f031c3af5fed37509d8979855397787aab70b2d1059099d2da.exe
Size 69KB
Sample240504-bs2ypacf46
SHA256 7040402574a686f031c3af5fed37509d8979855397787aab70b2d1059099d2da
MD5 ff354796f9e0a1edea31b8c9f65cda1b
SHA1 eae04a4c6b9ea586e9d7f2a351de06e90d64a5bb
SHA512 ef63fc4efc8d78dc8ea22dbcf05150406d89ea95b3dd3c154cc6a7fe39882844d089ecd08955d410a3031af9dce7a061cbea9db2ca5608795faee6132c2ed2ee
SSDEEP 768:RirkZkx7jOxt0Io0O99dyyus8GhrFuNtxv4c/HFGKndcHrqzwzv1NTNaTWsyih:Ri1dj7aO9qyVNKv4c/HFGLlzvi
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Detect larodectus Loader variant 2 1 IoCs

loader

resource	yara_rule
sample	family_latrodectus_v2

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7040402574a686f031c3af5fed37509d8979855397787aab70b2d1059099d2da.exe

IMPHASH ecb712bfe0d1558ffce8f8c2df526278
SHA256 7040402574a686f031c3af5fed37509d8979855397787aab70b2d1059099d2da
MD5 ff354796f9e0a1edea31b8c9f65cda1b
SHA1 eae04a4c6b9ea586e9d7f2a351de06e90d64a5bb
SHA512 ef63fc4efc8d78dc8ea22dbcf05150406d89ea95b3dd3c154cc6a7fe39882844d089ecd08955d410a3031af9dce7a061cbea9db2ca5608795faee6132c2ed2ee
SSDEEP 768:RirkZkx7jOxt0Io0O99dyyus8GhrFuNtxv4c/HFGKndcHrqzwzv1NTNaTWsyih:Ri1dj7aO9qyVNKv4c/HFGLlzvi
MD5 SHA1 SHA512 SSDEEP

Minor OS version

0

Major OS version

6

Entry point

4096

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths