Behavioral task
behavioral1
Sample
is156242.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
is156242.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
keygen.exe
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
keygen.exe
Resource
win10v2004-20220901-en
General
-
Target
2b18c9c487c4f2bb0beb74bef340c3abb369e04abd231a7d14d0832c05fa35a7
-
Size
188KB
-
MD5
6ea1f2161ff6b245b202c3987db10fb7
-
SHA1
8764985c9614e61417fea1b42b9bc6afcf13dbe4
-
SHA256
2b18c9c487c4f2bb0beb74bef340c3abb369e04abd231a7d14d0832c05fa35a7
-
SHA512
b2fcf1d7fd2733cf086af2cedaa777c03be2f7a4153eb3e01cd3d01786b5f531469be18a7d731274781ce7f683373ad33578a3ee25d35a407a446f24d7561af3
-
SSDEEP
3072:4G0Li657Xt3hMsA05ilLi+/f5rRUHVIiEfV5A0udFbwpVHu8D5iC3O9cGv:OLi657jElLibHTEN5DgFw7jDnOxv
Malware Config
Signatures
-
resource yara_rule static1/unpack001/keygen.exe upx
Files
-
2b18c9c487c4f2bb0beb74bef340c3abb369e04abd231a7d14d0832c05fa35a7.cab
-
is156242.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.data Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
keygen.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE