Overview
overview
8Static
static
8DSDOS.bat
windows7_x64
1DSDOS.bat
windows10-2004_x64
1DSDOS.exe
windows7_x64
DSDOS.exe
windows10-2004_x64
DSWIN.bat
windows7_x64
6DSWIN.bat
windows10-2004_x64
6DSWIN.exe
windows7_x64
6DSWIN.exe
windows10-2004_x64
6MANUAL.pdf
windows7_x64
1MANUAL.pdf
windows10-2004_x64
1SETUP.exe
windows7_x64
6SETUP.exe
windows10-2004_x64
7Static task
static1
Behavioral task
behavioral1
Sample
DSDOS.bat
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
DSDOS.bat
Resource
win10v2004-20220414-en
Behavioral task
behavioral3
Sample
DSDOS.exe
Resource
win7-20220414-en
Behavioral task
behavioral4
Sample
DSDOS.exe
Resource
win10v2004-20220414-en
Behavioral task
behavioral5
Sample
DSWIN.bat
Resource
win7-20220414-en
Behavioral task
behavioral6
Sample
DSWIN.bat
Resource
win10v2004-20220414-en
Behavioral task
behavioral7
Sample
DSWIN.exe
Resource
win7-20220414-en
Behavioral task
behavioral8
Sample
DSWIN.exe
Resource
win10v2004-20220414-en
Behavioral task
behavioral9
Sample
MANUAL.pdf
Resource
win7-20220414-en
Behavioral task
behavioral10
Sample
MANUAL.pdf
Resource
win10v2004-20220414-en
Behavioral task
behavioral11
Sample
SETUP.exe
Resource
win7-20220414-en
Behavioral task
behavioral12
Sample
SETUP.exe
Resource
win10v2004-20220414-en
General
-
Target
461d83b68c5b7afb97eb2a9f21c4622b7b5250a3cd6bab01bde492349f9ecb46
-
Size
773KB
-
MD5
4ae59507f1190401a3551ef2f9f0a2f4
-
SHA1
cfbb91301243a8bfabba8ceb1d0f7637499cd31e
-
SHA256
461d83b68c5b7afb97eb2a9f21c4622b7b5250a3cd6bab01bde492349f9ecb46
-
SHA512
c2abda12ad75207df506d50cd57fef7b56dc28429f3e5a6751d9c872a0d2b0424b15d38950322edc42b9c57283ddce58d728e26f3c1dca9ac6cad35ed9f40b2e
-
SSDEEP
12288:n4a3/0EflS79dUXlJCtAJF8o6KR/M+uuNeJF+VJEHdutSaGQG4C62mEvVR9yWCYD:nUxhaF8C/xjf0HYzG2CmE9RIzy/Aq
Malware Config
Signatures
-
Processes:
resource yara_rule static1/unpack001/SETUP.EXE upx
Files
-
461d83b68c5b7afb97eb2a9f21c4622b7b5250a3cd6bab01bde492349f9ecb46.rar
-
DSDOS.BAT
-
DSDOS.EXE
-
DSDOS.HLP
-
DSWIN.BAT
-
DSWIN.CNT
-
DSWIN.EXE.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 656KB - Virtual size: 655KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 807KB - Virtual size: 807KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
DSWIN.HLP
-
FREEDOS.BIN.zip
-
MANUAL.PDF.pdf
-
ORDER.TXT
-
PAD_FILE.XML.xml
-
READ.---
-
README.TXT
-
SETUP.EXE.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
SETUP.INF