executeScript
inject
isAttached
Behavioral task
behavioral1
Sample
Malaka_Executor_V4.2.rar
Resource
win11-20240508-en
Behavioral task
behavioral2
Sample
Malaka Api.dll
Resource
win11-20240508-en
Behavioral task
behavioral3
Sample
Malaka Executor (2).exe
Resource
win11-20240508-en
Behavioral task
behavioral4
Sample
Readme.txt
Resource
win11-20240508-en
Target
Malaka_Executor_V4.2.rar
Size
5.5MB
MD5
35908c77fa65cc75b0af7a15bb2cd977
SHA1
1559571339163b1481122bac7cbc81e3858fcc29
SHA256
2f78e9f4886465f1abd7e6d24781ee927a8691639d51d77388a43d465c5291a3
SHA512
b88dd77e10979e1aa911a51dd25a7778323deeb94e342810979ab17287933f032b708420b7be261c4fcd43a3e6a52c6904ade422c874f5a8a6e8244c5965a3a4
SSDEEP
98304:mElZjVmZUwo6HMB0yg4pomwKM8j+qMHCqo7uZwnOzvVwQvi6ovxq12gS7Oas89oj:RZjAmmHMGyg4poOMLI7nwiQva5q12gl5
resource | yara_rule |
---|---|
static1/unpack001/Malaka Api.dll | themida |
Checks for missing Authenticode signature.
resource |
---|
unpack001/Malaka Api.dll |
unpack001/Malaka Executor (2).exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
executeScript
inject
isAttached
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ