ffdroider | 2024-06-29_cb6ef36660962b9fb4f527ca90a5c535_magniber | Triage

Sharing

General

Target

2024-06-29_cb6ef36660962b9fb4f527ca90a5c535_magniber
Size

4.2MB
MD5

cb6ef36660962b9fb4f527ca90a5c535
SHA1

07eedca55e697d798093020d6e156b0b736062a4
SHA256

a4157f4a85da5b2660c47ac767fa4ebfcb1af6e32729456203c72fdd38873acc
SHA512

c108cdb3b668eb6a7cb6d188820d743cba23e0808ef884237b4111849b52fa3c17779deaa930ac60bf66aaba51ab98b8b0acb9a81d167d94bff4c655ca27cc63
SSDEEP

98304:U/JTOiDF//fWShM4/kdH0aBYLFgFvDuuIO2BFLOAkGkzdnEVomFHKnP:iC8TBQ5uuIO2BFLOyomFHKnP

Score

10^/10

ffdroider

Malware Config

Signatures

FFDroider payload 1 IoCs

resource	yara_rule
sample	family_ffdroider

Ffdroider family
ffdroider

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-29_cb6ef36660962b9fb4f527ca90a5c535_magniber

Files

2024-06-29_cb6ef36660962b9fb4f527ca90a5c535_magniber
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 477KB - Virtual size: 477KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ