Behavioral task
behavioral1
Sample
EasySkin/2.ִĽ.url
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
EasySkin/2.ִĽ.url
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
EasySkin/4.win10ʾ.url
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
EasySkin/4.win10ʾ.url
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
EasySkin/EasySkin_v4.4.2.exe
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
EasySkin/EasySkin_v4.4.2.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
EasySkin/ԶʶӢ.msi
Resource
win7-20220901-en
Behavioral task
behavioral8
Sample
EasySkin/ԶʶӢ.msi
Resource
win10v2004-20220812-en
General
-
Target
a8627db6a61812bc8ed94d34434227b3d815ea23396b99cf6028427deb1d67a7
-
Size
4.3MB
-
MD5
9f7754f0105fd7062553005db161a24e
-
SHA1
2987cf092a5834fb649a11717b2af5ae216fd886
-
SHA256
a8627db6a61812bc8ed94d34434227b3d815ea23396b99cf6028427deb1d67a7
-
SHA512
ce5eb5e3c5a3fc24548cb6b6fd9b669152c0f7303aa4a21e74f5264a33117e90c2f3f597bf2b7ca0ec3aa63838d7abe22c873a25f90a235b4ab7d675f370b6d4
-
SSDEEP
98304:LIj+wzzcSg5zePE7gGEsCXTZGxjc8mqdGoLHSFNilbQF:0+wncSkU3GE1TI1BfGo0BF
Malware Config
Signatures
-
resource yara_rule static1/unpack001/EasySkin/EasySkin_v4.4.2.exe aspack_v212_v242
Files
-
a8627db6a61812bc8ed94d34434227b3d815ea23396b99cf6028427deb1d67a7.zip
-
EasySkin/1.ʾѹ1314
-
EasySkin/2.ִĽ.url.url
-
EasySkin/3.Ϸ类رɱ
-
EasySkin/4.win10ʾ.url.url
-
EasySkin/EasySkin_v4.4.2.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 531KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3.4MB - Virtual size: 8.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 74KB - Virtual size: 680KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
EasySkin/ԶʶӢ.msi.msi .vbs