Behavioral task
behavioral1
Sample
8722989a3605360dcaa0bfab56841f4660ea79d495d01b518068f3ce67877ad0.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
8722989a3605360dcaa0bfab56841f4660ea79d495d01b518068f3ce67877ad0.exe
Resource
win11-20240802-en
General
-
Target
8722989a3605360dcaa0bfab56841f4660ea79d495d01b518068f3ce67877ad0.exe
-
Size
72KB
-
MD5
65e2fd12223dc2def303bdfc8e7b628c
-
SHA1
9ff11679060fce53632641228318e4393cb94dbc
-
SHA256
8722989a3605360dcaa0bfab56841f4660ea79d495d01b518068f3ce67877ad0
-
SHA512
20e7298d0964542623e356cb98697f0ed995d3809f5936cd8b21f76bbf52da0f832edec2be7252778647de7795e69fa7f8873b1d4b175b3660b28eb4118dd7e2
-
SSDEEP
1536:3R8zxbOmOBVjGFV3g5I+va6z5f85NGyPrnRlHl:h8zxqfb5I+xknG6RlF
Malware Config
Signatures
-
Detects Latrodectus 1 IoCs
Detects Latrodectus v1.4.
resource yara_rule sample family_latrodectus_1_4 -
Latrodectus family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8722989a3605360dcaa0bfab56841f4660ea79d495d01b518068f3ce67877ad0.exe
Files
-
8722989a3605360dcaa0bfab56841f4660ea79d495d01b518068f3ce67877ad0.exe.exe windows:6 windows x64 arch:x64
db7aeb75528663639689f852fd366243
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
PeekNamedPipe
GetLastError
CreateMutexW
user32
MessageBeep
MessageBoxA
Sections
.text Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ