Behavioral task
behavioral1
Sample
reso.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
reso.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
reso汉化版.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
reso汉化版.exe
Resource
win10v2004-20220812-en
General
-
Target
4a30841653979671669b028c35ab1ce83139b5f6f5f007cb5e1c69809a9e700a
-
Size
8KB
-
MD5
ffc56f72ab2c2e6d824f0d5ca9ed6110
-
SHA1
91ca717c185b69667fa00c9b6400fa84437a3719
-
SHA256
4a30841653979671669b028c35ab1ce83139b5f6f5f007cb5e1c69809a9e700a
-
SHA512
d9ad714c07ff54e10ea7b64634543340810ee92dd3bf8fce9cb6226cb405e0d63f20279f168c2dba7613ffbab599adc2542b97d28e50933fdbb1813b18f594b9
-
SSDEEP
192:J8AkFB1YE0tfVYz4Hyl3fMeaB0ps7hxtrftxjesY:rkr15SfVY8HyP1OR7NFxjesY
Malware Config
Signatures
-
resource yara_rule static1/unpack001/reso.exe upx
Files
-
4a30841653979671669b028c35ab1ce83139b5f6f5f007cb5e1c69809a9e700a.7z
-
reso.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
reso汉化版.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ