Behavioral task
behavioral1
Sample
GenesisLoader.exe
Resource
win10ltsc2021-20241023-en
General
-
Target
GenesisLoader.exe
-
Size
3.2MB
-
MD5
8b684724a136910f13bb804e23f6c063
-
SHA1
d573add7ec341c34d318407041486827c0e61cc4
-
SHA256
0b57a16929b2c048ed07a5b5a22e0615ddc54052d3bf6e159d402e1db2451993
-
SHA512
88d495bca59669ac8a728cd09d47723098840f5dc8afff79882aad6f751b04342d82e7d144306062d5ee535730db4b6f139a81fd2a7b06658aed02eb5f2057fd
-
SSDEEP
98304:e7Kdi/nDXpVyNpEEY3JcPr4+OUYujeXy:KKduLCNpfY3JX+vje
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource GenesisLoader.exe
Files
-
GenesisLoader.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE