Static task
static1
Behavioral task
behavioral1
Sample
MegpoidV4_Native/MegpoidV4_Native.exe
Resource
win7-20240221-en
General
-
Target
MegpoidV4_Native.zip
-
Size
464.4MB
-
MD5
e5e1d5b4c0333974b59704be6e441049
-
SHA1
53ca970118f06f7971d497960cdf4a7b1c750d3f
-
SHA256
821a370b57b332630c832c7e58326f230d8725226e02d99b2181b57b2b5ca85f
-
SHA512
b336e62ef79ec235a412bf1ef544af92a299f38ec3f7e83b06134dd22d54f81aafa5da27c281dbb006bedcd28501aeb9c4593af727b981303c6f6f7d9f87d8a2
-
SSDEEP
6291456:kSiWQMFHCT2Q+EfgaS5NNhXv7f4/DBJTK8fmz4QuG76L20/hHSZjgoMXRBtnqeN5:D0CXsgaS5HJ7fkG8fmziM6zYFgvaeNIS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/MegpoidV4_Native/MegpoidV4_Native.exe
Files
-
MegpoidV4_Native.zip.zip
-
MegpoidV4_Native/BreathWav/br01_Medium.wav
-
MegpoidV4_Native/BreathWav/br02_Medium.wav
-
MegpoidV4_Native/BreathWav/br02_Medium_2.wav
-
MegpoidV4_Native/BreathWav/br03_Short.wav
-
MegpoidV4_Native/BreathWav/br04_Short.wav
-
MegpoidV4_Native/BreathWav/br05_Medium.wav
-
MegpoidV4_Native/BreathWav/br06_Medium.wav
-
MegpoidV4_Native/BreathWav/br07_Medium.wav
-
MegpoidV4_Native/BreathWav/br08_Medium.wav
-
MegpoidV4_Native/BreathWav/br09_Short.wav
-
MegpoidV4_Native/BreathWav/br1.wav
-
MegpoidV4_Native/BreathWav/br10_Long_exhale.wav
-
MegpoidV4_Native/BreathWav/br11_Short_exhale.wav
-
MegpoidV4_Native/BreathWav/br12_Short_exhale.wav
-
MegpoidV4_Native/BreathWav/br13_Short_exhale.wav
-
MegpoidV4_Native/BreathWav/br14_Short_exhale.wav
-
MegpoidV4_Native/BreathWav/br15_Short_exhale.wav
-
MegpoidV4_Native/BreathWav/br16_Long_exhale.wav
-
MegpoidV4_Native/BreathWav/br2.wav
-
MegpoidV4_Native/BreathWav/br3.wav
-
MegpoidV4_Native/BreathWav/br4.wav
-
MegpoidV4_Native/BreathWav/br5.wav
-
MegpoidV4_Native/MegpoidV4_Native.exe.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
MegpoidV4_Native/megpoidV4_native.txt
-
MegpoidV4_Native/setup.bin