ffdroider | 2024-06-20_4f6b0b0260b9cd79f258900b0e4e71a4_magniber | Triage

Sharing

General

Target

2024-06-20_4f6b0b0260b9cd79f258900b0e4e71a4_magniber
Size

4.6MB
MD5

4f6b0b0260b9cd79f258900b0e4e71a4
SHA1

c78efdcfa44417d4cad85af15584f236cf1093a9
SHA256

c7aba9c8835030aaba860037b6ddee24b844c1c7d6443b439b7df3c8556b8edb
SHA512

b3dae47c1761342ce7f7a6652b5df6293424ea8b61130d2e6953d92dff129e287f92ff38a1c88867dc1c8fc7e232c2b85ddc80abfa20f99cbd68301a53f3c6a3
SSDEEP

98304:Faj83CgjxmeEYCD3KZwUWmSBO3EJ1A2jp/KBvmFLOAkGkzdnEVomFHKnP:Mn3bl/KBvmFLOyomFHKnP

Score

10^/10

ffdroider

Malware Config

Signatures

FFDroider payload 1 IoCs

resource	yara_rule
sample	family_ffdroider

Ffdroider family
ffdroider

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-20_4f6b0b0260b9cd79f258900b0e4e71a4_magniber

Files

2024-06-20_4f6b0b0260b9cd79f258900b0e4e71a4_magniber
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 496KB - Virtual size: 496KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ