Static task
static1
Behavioral task
behavioral1
Sample
installer_rise_f.exe
Resource
win10v2004-20220901-en
General
-
Target
installer_rise_f.rar
-
Size
18.2MB
-
MD5
905d9e83b2204c28b59d09fa76df02da
-
SHA1
d43ed46b7969e42a905700f56caa5549496f9ec2
-
SHA256
7d1b41bd042a904deb110878963a250d5c26b18b27aeb07e1610987df752af6b
-
SHA512
ea5854eecef948bd18805af14e9518ba6e307c320dd0e5222ac8c54daf317a68327aaa2dbbf564424ecd7196076b1970ec85fc41f9200d34eb40758453335197
-
SSDEEP
393216:pKPNCNDqng27r9kC3zhzQUpHWxf8J0Hhho+KEKx4wMlE7djf:WN5g7C37tWJ8JyjtE4Fipjf
Malware Config
Signatures
Files
-
installer_rise_f.rar.rar
Password: RiseChanger
-
installer_rise_f.exe.exe windows x86
Password: RiseChanger
9f5b241c0112088a0d4a84e2cd122836
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
TranslateMessage
CharUpperBuffW
advapi32
RegOpenKeyExA
shell32
ShellExecuteA
ole32
CoUninitialize
d3d9
Direct3DCreate9
d3dx9_43
D3DXCreateTextureFromFileInMemoryEx
imm32
ImmSetCandidateWindow
Sections
.text Size: - Virtual size: 398KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 659KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rise_in Size: - Virtual size: 15.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rise_in Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rise_in Size: 18.3MB - Virtual size: 18.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ