Original4030.iso
- SHA256 489cc0ce8393870d0c7b01891d56e267cecc2edce79e774af996cdcf4fbda411
Static task
static1
Behavioral task
behavioral1
Sample
Originals.lnk
Resource
win7-20220812-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Originals.lnk
Resource
win10v2004-20220812-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
carcasses/peg.dll
Resource
win7-20220901-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
carcasses/peg.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral5
Sample
carcasses/virtuosity.cmd
Resource
win7-20220812-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
carcasses/virtuosity.cmd
Resource
win10v2004-20220812-en
windows10-2004-x64
0 signatures
150 seconds
General
- Target Original4030.iso
- Size 634KB
- Sample221018-vsmzbaggfk
- SHA256 489cc0ce8393870d0c7b01891d56e267cecc2edce79e774af996cdcf4fbda411
- MD5 0605c80ce3da18c57a339730981349a6
- SHA1 81d81119a0ccaa1011c9f14f87e4759a0c3cd2c7
- SHA512 5875ae8c97cfe5cdfdf365d16fec29a4aff3153f258beae050049e899f985000277b0bb6502ee7a784812791e9051c9991c593721eb8e366e01ff2b425b4162e
- SSDEEP 12288:PptV8uc0KS9gpC1GIBv9PmgfKP1KJqbr:PpI2Krp9IaTYJqbr
- MD5 SHA1 SHA512 SSDEEP
Score
N/A
Malware Config
Signatures
File Explorer
-
Original4030.iso.iso 634KB
-
Originals.lnk.lnk 1KB
-
carcasses/peg.des.dll 561KB
-
carcasses/simple.gif12KB
-
carcasses/virtuosity.cmd.cmd .vbs 402B
Originals.lnk
- SHA256 35a446d6961e2dfac55be5c60713e86172e5746bc984002a6d04747b66578731
- MD5 66a8168164f88a724e0a6b0a34d39842
- SHA1 125017cb152593ecf1a168f785f80bd809ab91af
- SHA512 8276bc76ce7de48b6116801caeacf35d1dd573f733b7de52d60bb5e9893511381123b0aee2d7927c6c1421ffa35e84802fa665369b0f4c629268484d12aaade9
- MD5 SHA1 SHA512
carcasses/peg.des
- IMPHASH 901da269fb08ee80540f12ffcb2dfc6d
- SHA256 319b660e3224b3c5f9ec19645ef1b05c8c91f70ebe3235d55d4c86f47eccdbbd
- MD5 955bc30695dd32875e5b1f3c6517b935
- SHA1 9b5c5d21a15a7e66cc897299296d9f05b0d7d1b9
- SHA512 24f8c0c97bd40520be5499648967c653ea92a1927f833b8d758788242329fec949aefb36b394ba559becfedf799e0ad07c579ad38d7dfb2b1608def27504471d
- SSDEEP 6144:ypIe6W8uc0KxlK9gpC1d88LKXeAOkuL9P5Qt6frqLwYzbn4NKToC2HD9qFmq:yptV8uc0KS9gpC1GIBv9PmgfKP1KJq
- MD5 SHA1 SHA512 SSDEEP
Minor OS version
Major OS version
Entry point
257231
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
GetModuleHandleW
DebugBreak
GetTickCount
VirtualAlloc
GetCommandLineA
CreateFileA
GetFileAttributesA
SetUnhandledExceptionFilter
QueryPerformanceCounter
DeviceIoControl
LeaveCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
TlsGetValue
FlushInstructionCache
GetSystemInfo
GetLocalTime
GetVersion
GetSystemDirectoryA
GetModuleFileNameA
GetModuleHandleA
LoadResource
LoadLibraryA
LocalAlloc
MulDiv
lstrcmpA
lstrcmpiA
lstrlenA
lstrlenW
FindResourceA
GetComputerNameA
SetEndOfFile
WriteConsoleW
HeapSize
CreateFileW
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
FindNextFileA
Sleep
VirtualProtect
FindFirstFileA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
MoveFileExW
ReadConsoleW
EnterCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
WideCharToMultiByte
LCMapStringEx
GetStringTypeW
GetCPInfo
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
GetStartupInfoW
GetSystemTimeAsFileTime
InitializeSListHead
TerminateProcess
RaiseException
RtlUnwind
InterlockedFlushSList
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetFileType
CloseHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
ReadFile
GetFileSizeEx
SetFilePointerEx
user32
FindWindowA
MessageBoxW
GetDC
GetActiveWindow
GetDialogBaseUnits
DialogBoxParamA
EndDialog
SendMessageA
gdi32
GetEnhMetaFileW
advapi32
RegCloseKey
ole32
CoInitializeEx
shlwapi
PathFindOnPathA
PathFindExtensionA
PathGetDriveNumberA
ord155
StrToIntA
PathAppendA
PathFileExistsA
PathFindSuffixArrayA
DllRegisterServer
DllUnregisterServer
buildable
euornithic
paranitrosophenol
photosynthetically
psephomancy
scyphostoma
Name
.data
Size
364KB
Virtual Size
363KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data4
Size
35KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data1
Size
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data2
Size
512B
Virtual Size
84B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
146KB
Virtual Size
145KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
carcasses/simple.gif
- SHA256 601f2365dbca1de5c5253e067a29c9f4d21e00836559caa5128c5eef5aa1d401
- MD5 bb2ba6a5974e661e8571baeed27faca6
- SHA1 b3998dde4088c08e8e6419cdb822acd7c77849aa
- SHA512 42525c60239950819d6a3747fb2f053dd6837cde98c64468b2fc9d9af4e84a0f7d3dc4caf7c63da9835fc1e64b5aeee30a592bebeb6e7538f0e6b3c88333d4fe
- SSDEEP 192:94foA0CKjoE/M7EWPnDnD3hrCBfdkUGojyLvXivw1/QL+xthu4DnkGOCYk7w:94f70j3MoSnbLIBtGVL/QCQLathd2O7w
- MD5 SHA1 SHA512 SSDEEP
carcasses/virtuosity.cmd
- SHA256 a4cfc0f90711d94416229c3ab08e541d0eff351e00af393a5ad994a21c0e50b9
- MD5 f7494e15a823df4497d98e875709aa46
- SHA1 4b292cab5508d8a0c3a6f5b005031e292ba54f19
- SHA512 ce2dc897dd3418bef5b2e0591a25a1b1e4b6962f9351144e0774e2d932466fd9e3ad261c5b6af4819d52c62c1024f94e78c6c2333be03c2b62609387ad821bb2
- MD5 SHA1 SHA512