Static task
static1
General
-
Target
theme_macos.zip
-
Size
9.6MB
-
MD5
493b855bc05adf79737b2c4e0f0e15e1
-
SHA1
2d22fdb0eaffe7e486edeb6ab67996c23ff9708a
-
SHA256
d4cbc5f84b9cad843bd27d0483c158e468c51b5f984d2e43680ba439b907f2bc
-
SHA512
3800d4356ee6e3fc5a533ee575e3facc01ff761b9e9c6c7e3adb7661046a51fc99653f405c50a03696a3834debd8dd4ddab2a47c0195db9db6a73e5192cc1e58
-
SSDEEP
196608:5OxOcKwy3Fl6iUQixFRKb7QpNe5xndeyRXigSH4NlMl:kTkFsiUtE7QpEYy8g/ql
Malware Config
Signatures
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/macOS/Shell/NormalColor/en-US/shellstyle.dll.mui unpack001/macOS/Shell/NormalColor/shellstyle.dll unpack001/macOS/macOS.msstyles
Files
-
theme_macos.zip.zip
-
macOS.theme
-
macOS/Shell/NormalColor/en-US/Leopardlogo2.png.png
-
macOS/Shell/NormalColor/en-US/shellstyle.dll.mui.dll windows:10 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.rdata Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
macOS/Shell/NormalColor/shellstyle.dll.dll windows:10 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Sections
.rdata Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
macOS/macOS.msstyles.dll windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.rdata Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 808B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1016KB - Virtual size: 1016KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 110B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
macOS/macOS/Alternate Select.cur
-
macOS/macOS/Busy.ani
-
macOS/macOS/Diagonal Resize 1.cur
-
macOS/macOS/Diagonal Resize 2.cur
-
macOS/macOS/Handwriting.cur
-
macOS/macOS/Help Select.cur
-
macOS/macOS/Horizontal Resize.cur
-
macOS/macOS/Link Select.cur
-
macOS/macOS/Move.cur
-
macOS/macOS/Normal Select.cur
-
macOS/macOS/Precision Select.cur
-
macOS/macOS/Text Select.cur
-
macOS/macOS/Unavailable.cur
-
macOS/macOS/Vertical Resize.cur
-
macOS/macOS/Working In Background.ani
-
macOS/wallpaper/macos.jpg.jpg