Static task
static1
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win10v2004-20221111-en
General
-
Target
Sapphire_plugin.rar
-
Size
2.1MB
-
MD5
21e6ba0aba0c4a0b6d6f0caf527d02b9
-
SHA1
28eec6c4d738e216e632e7208bf8415dced0931e
-
SHA256
76aeb6f9e7d3b8518b9f026cceacf623a62cdbfff97c04af286f4bb1a0e80bd9
-
SHA512
a768bc451ccb94f71edeba71f6cd9f8647e535a2c4d90106c0ce0cfa164bc4882a4b10e699e1ff6c86a1d954710bcfecbe8ed8b0bc5a642a3ab29ffd690849ce
-
SSDEEP
49152:fjxVaAI8hxpVlHMY+XNDdeL6Wv5zUQu47GLHTNog:NVltVlHR+pdeLDxuWGP7
Malware Config
Signatures
Files
-
Sapphire_plugin.rar.rar
Password: gamesoft
-
Setup.exe.exe windows x86
Password: gamesoft
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
9r\U@yk Size: 917KB - Virtual size: 916KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 6.4MB - Virtual size: 6.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ