Static task
static1
Behavioral task
behavioral1
Sample
InstallingFile_x86_x64m.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
InstallingFile_x86_x64m.exe
Resource
win10v2004-20221111-en
General
-
Target
InstallingFile_x64.zip
-
Size
16.6MB
-
MD5
d5319e62774e647c5c295e2bbd053c95
-
SHA1
239366c440e8a35904983b174222db1820b65ea8
-
SHA256
9774cc8f425e59c96f00c1819fb1f2466705b797fd046d010a1319f9b1988a22
-
SHA512
a26631b4d02545700dd3ddeb600f4ce754ae98791d5979b8e94ceb01ca9072d7586fd80c9f4f3ce632e31111048b648c4cfa1f4d041b6df91ec3b357a2492cc1
-
SSDEEP
393216:W8oAnOt2T5fGaPfX8s6B9jkDjW0EJiqlwMKxMX2882g9W82z:W8obA0aPfMl3kXNSiqlwMgMXV827f
Malware Config
Signatures
Files
-
InstallingFile_x64.zip.zip
Password: softcrack
-
InstallingFileXmgeting_gr_dd/ae_bonus_eng_rs_cdlk.txt
-
InstallingFileXmgeting_gr_nb/kernelmodulke32_ep.dll
-
InstallingFileXmgeting_gr_nb/kernelmodulke32_lk.dll
-
InstallingFileXmgeting_gr_nb/kernelmodulke32_lq.dll
-
InstallingFileXmgeting_gr_nb/kernelmodulke32_mm.dll
-
InstallingFileXmgeting_gr_nb/kernelmodulke32_wete.dll
-
InstallingFileXmgeting_gr_nb/kernelmodulke32_ziof.dll
-
InstallingFile_x86_x64m.exe.exe windows x86
Password: softcrack
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
HQ?(>y Size: 847KB - Virtual size: 846KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 6.4MB - Virtual size: 6.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
MAPSEU/CAMPAIGN/050.ssc.gz
Password: softcrack
-
050.ssc
-
MAPSEU/CAMPAIGN/050000.ssc.gz
Password: softcrack
-
[Content]
-
MAPSEU/CAMPAIGN/051.ssc.gz
Password: softcrack
-
051.ssc
-
MAPSEU/CAMPAIGN/051000.ssc.gz
Password: softcrack
-
051000.ssc
-
MAPSEU/CAMPAIGN/052.ssc.gz
Password: softcrack
-
052.ssc
-
MAPSEU/CAMPAIGN/052000.ssc.gz
Password: softcrack
-
052000.ssc
-
MAPSEU/CAMPAIGN/053.ssc.gz
Password: softcrack
-
053.ssc
-
MAPSEU/CAMPAIGN/053000.ssc.gz
-
MAPSEU/CAMPAIGN/054.ssc.gz
-
MAPSEU/CAMPAIGN/054000.ssc.gz
-
MAPSEU/CAMPAIGN/060.ssc.gz
-
MAPSEU/CAMPAIGN/060000.ssc.gz
-
MAPSEU/CAMPAIGN/061.ssc.gz
-
MAPSEU/CAMPAIGN/061000.ssc.gz
-
MAPSEU/CAMPAIGN/062.ssc.gz
-
MAPSEU/CAMPAIGN/062000.ssc.gz
-
MAPSEU/CAMPAIGN/063.ssc.gz
-
MAPSEU/CAMPAIGN/063000.ssc.gz
-
MAPSEU/CAMPAIGN/064.ssc.gz
-
MAPSEU/CAMPAIGN/064000.ssc.gz
-
MAPSEU/CAMPAIGN/info.txt
-
MAPSEU/MPLAY/(eu2015)mlt2x2.smm.gz
-
MAPSEU/MPLAY/(eu2015)mlt2x4.smm.gz
-
MAPSEU/MPLAY/(eu2015)mlt2x8.smm.gz
-
MAPSEU/MPLAY/(eu2015)mlt3x9.smm.gz
-
MAPSEU/MPLAY/(eu2015)mlt4x8.smm.gz
-
RBIT.ico
-
kernelmodulke32_bnc.dll
-
kernelmodulke32_cc.dll
-
kernelmodulke32_cxcv.dll