General
-
Target
octoshape.exe
-
Size
312KB
-
MD5
b32e4097a1f62a8d20376c12b277dcb2
-
SHA1
b8531309a32effc1883533832d1bdb3c88a0c9ff
-
SHA256
bac10c1e45052ce4a4246a880585dc47bebac6108d65b2a00f3a341842317739
-
SHA512
3088ea8acc57903a90f22edd6b8ebdb1fe9b99953a2cce457f4670243e649a5fca72073b5db8db671d0381ad6b83d8a9d45e0c60daf85875c9709b9d6c638fd5
-
SSDEEP
6144:IVxtZOOTXyXKyKbmti868bOVK2rMCIVrITaNtIGZ7Z1B/TQ5WNYMIeC5voS8:KxTOxXKyKOnaV1IdrIG1/TQ5WuJJNoS8
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource octoshape.exe
Files
-
octoshape.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 700KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 283KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE