Static task
static1
Behavioral task
behavioral1
Sample
Expert-Soft_PC/File_PC-Set_Up.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Expert-Soft_PC/File_PC-Set_Up.exe
Resource
win10v2004-20220812-en
General
-
Target
Expert-Soft_PC.rar
-
Size
23.1MB
-
MD5
7ed5b81f9abcff66ed54f41ebdad5dbe
-
SHA1
97277906adeabc9bba4c938bc6197684fd877515
-
SHA256
373beddc7d46294e688c3afffc8d3448be47004cd681ded7016285a9b6a51f00
-
SHA512
b900a189d0f5a1dc30cd4b23d40a0fa52d30b81d8417465fa12c7313b3927fb517b73597d06d6ffb931241c3fd084cd6b0c56fc0927a2f8eb16b0003d57f8fcc
-
SSDEEP
393216:8ob5CAyN9BGsmfwFSU1ruSun/37KFPjNBO2WSCtGJpHYd8ZMSMtnWL4r:Bb5lyN9yGT1SV/eFPjSCmIpHgNK0r
Malware Config
Signatures
Files
-
Expert-Soft_PC.rar.rar
Password: 1212
-
Expert-Soft_PC/About/da - Copy.pak
-
Expert-Soft_PC/About/da.pak
-
Expert-Soft_PC/About/de - Copy.pak
-
Expert-Soft_PC/About/de.pak
-
Expert-Soft_PC/About/el - Copy.pak
-
Expert-Soft_PC/About/el.pak
-
Expert-Soft_PC/About/en-GB - Copy (2).pak
-
Expert-Soft_PC/About/en-GB - Copy - Copy.pak
-
Expert-Soft_PC/About/en-GB - Copy.pak
-
Expert-Soft_PC/About/en-GB.pak
-
Expert-Soft_PC/About/en-US - Copy (2).pak
-
Expert-Soft_PC/About/en-US - Copy - Copy.pak
-
Expert-Soft_PC/About/en-US - Copy.pak
-
Expert-Soft_PC/About/en-US.pak
-
Expert-Soft_PC/About/es - Copy (2).pak
-
Expert-Soft_PC/About/es - Copy - Copy.pak
-
Expert-Soft_PC/About/es - Copy.pak
-
Expert-Soft_PC/About/es-419 - Copy (2).pak
-
Expert-Soft_PC/About/es-419 - Copy - Copy.pak
-
Expert-Soft_PC/About/es-419 - Copy.pak
-
Expert-Soft_PC/About/es-419.pak
-
Expert-Soft_PC/About/es.pak
-
Expert-Soft_PC/About/et - Copy (2).pak
-
Expert-Soft_PC/About/et - Copy - Copy.pak
-
Expert-Soft_PC/About/et - Copy.pak
-
Expert-Soft_PC/About/et.pak
-
Expert-Soft_PC/About/fa - Copy (2).pak
-
Expert-Soft_PC/About/fa - Copy - Copy.pak
-
Expert-Soft_PC/About/fa - Copy.pak
-
Expert-Soft_PC/About/fa.pak
-
Expert-Soft_PC/About/fi - Copy - Copy.pak
-
Expert-Soft_PC/About/fi - Copy.pak
-
Expert-Soft_PC/About/fi.pak
-
Expert-Soft_PC/About/fil - Copy.pak
-
Expert-Soft_PC/About/fil.pak
-
Expert-Soft_PC/About/fr - Copy.pak
-
Expert-Soft_PC/About/fr.pak
-
Expert-Soft_PC/About/gu.pak
-
Expert-Soft_PC/About/he.pak
-
Expert-Soft_PC/About/hi.pak
-
Expert-Soft_PC/About/hr.pak
-
Expert-Soft_PC/About/hu.pak
-
Expert-Soft_PC/About/id.pak
-
Expert-Soft_PC/About/it.pak
-
Expert-Soft_PC/About/ja.pak
-
Expert-Soft_PC/About/kn.pak
-
Expert-Soft_PC/About/ko.pak
-
Expert-Soft_PC/About/lt.pak
-
Expert-Soft_PC/About/lv.pak
-
Expert-Soft_PC/About/ml.pak
-
Expert-Soft_PC/About/mr.pak
-
Expert-Soft_PC/About/ms.pak
-
Expert-Soft_PC/About/nb.pak
-
Expert-Soft_PC/About/nl.pak
-
Expert-Soft_PC/About/pl.pak
-
Expert-Soft_PC/About/pt-BR.pak
-
Expert-Soft_PC/About/pt-PT.pak
-
Expert-Soft_PC/About/ro.pak
-
Expert-Soft_PC/About/ru.pak
-
Expert-Soft_PC/About/sk.pak
-
Expert-Soft_PC/About/sl.pak
-
Expert-Soft_PC/About/sr.pak
-
Expert-Soft_PC/About/sv.pak
-
Expert-Soft_PC/About/sw.pak
-
Expert-Soft_PC/About/ta.pak
-
Expert-Soft_PC/About/te.pak
-
Expert-Soft_PC/About/th.pak
-
Expert-Soft_PC/About/tr.pak
-
Expert-Soft_PC/About/uk.pak
-
Expert-Soft_PC/About/vi.pak
-
Expert-Soft_PC/About/zh-CN.pak
-
Expert-Soft_PC/About/zh-TW.pak
-
Expert-Soft_PC/File/am.pak
-
Expert-Soft_PC/File/ar.pak
-
Expert-Soft_PC/File/bg.pak
-
Expert-Soft_PC/File/bin.dll
-
Expert-Soft_PC/File/bn - Copy.pak
-
Expert-Soft_PC/File/bn.pak
-
Expert-Soft_PC/File/ca - Copy.pak
-
Expert-Soft_PC/File/ca.pak
-
Expert-Soft_PC/File/cs - Copy.pak
-
Expert-Soft_PC/File/cs.pak
-
Expert-Soft_PC/File/da - Copy (2).pak
-
Expert-Soft_PC/File/da - Copy - Copy.pak
-
Expert-Soft_PC/File/da - Copy.pak
-
Expert-Soft_PC/File/da.pak
-
Expert-Soft_PC/File/de - Copy (2).pak
-
Expert-Soft_PC/File/de - Copy - Copy.pak
-
Expert-Soft_PC/File/de - Copy.pak
-
Expert-Soft_PC/File/de.pak
-
Expert-Soft_PC/File/el - Copy (2).pak
-
Expert-Soft_PC/File/el - Copy - Copy.pak
-
Expert-Soft_PC/File/el - Copy.pak
-
Expert-Soft_PC/File/el.pak
-
Expert-Soft_PC/File/en-GB - Copy.pak
-
Expert-Soft_PC/File/en-GB.pak
-
Expert-Soft_PC/File/en-US - Copy.pak
-
Expert-Soft_PC/File/en-US.pak
-
Expert-Soft_PC/File/es - Copy.pak
-
Expert-Soft_PC/File/es-419 - Copy.pak
-
Expert-Soft_PC/File/es-419.pak
-
Expert-Soft_PC/File/es.pak
-
Expert-Soft_PC/File/et - Copy.pak
-
Expert-Soft_PC/File/et.pak
-
Expert-Soft_PC/File/fa.pak
-
Expert-Soft_PC/File/fi.pak
-
Expert-Soft_PC/File/fil.pak
-
Expert-Soft_PC/File/fr.pak
-
Expert-Soft_PC/File/gu.pak
-
Expert-Soft_PC/File/he.pak
-
Expert-Soft_PC/File/hi.pak
-
Expert-Soft_PC/File/hr.pak
-
Expert-Soft_PC/File/hu.pak
-
Expert-Soft_PC/File/id.pak
-
Expert-Soft_PC/File/it.pak
-
Expert-Soft_PC/File/ja.pak
-
Expert-Soft_PC/File/kn.pak
-
Expert-Soft_PC/File/ko.pak
-
Expert-Soft_PC/File/lt.pak
-
Expert-Soft_PC/File/lv.pak
-
Expert-Soft_PC/File/ml.pak
-
Expert-Soft_PC/File/mr.pak
-
Expert-Soft_PC/File/ms.pak
-
Expert-Soft_PC/File/nb.pak
-
Expert-Soft_PC/File/nl.pak
-
Expert-Soft_PC/File/pl.pak
-
Expert-Soft_PC/File/pt-BR.pak
-
Expert-Soft_PC/File/pt-PT.pak
-
Expert-Soft_PC/File/ro.pak
-
Expert-Soft_PC/File/ru.pak
-
Expert-Soft_PC/File/sk.pak
-
Expert-Soft_PC/File/sl.pak
-
Expert-Soft_PC/File/sr.pak
-
Expert-Soft_PC/File/sv.pak
-
Expert-Soft_PC/File/sw.pak
-
Expert-Soft_PC/File/ta.pak
-
Expert-Soft_PC/File/te.pak
-
Expert-Soft_PC/File/th.pak
-
Expert-Soft_PC/File/tr.pak
-
Expert-Soft_PC/File/uk.pak
-
Expert-Soft_PC/File/vi.pak
-
Expert-Soft_PC/File/zh-CN.pak
-
Expert-Soft_PC/File/zh-TW.pak
-
Expert-Soft_PC/File_PC-Set_Up.exe.exe windows x86
Password: 1212
11ea24073ee65343ee563e3160c77fde
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
DestroyWindow
CharUpperBuffW
gdi32
GetObjectW
ole32
CoDecodeProxy
Sections
.text Size: - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xEN Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bVi Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.`3i Size: 5.7MB - Virtual size: 5.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Expert-Soft_PC/Readme.txt
-
Expert-Soft_PC/file.dll.dll windows x86
Password: 1212
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 10.6MB - Virtual size: 10.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 59KB - Virtual size: 421KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 572KB - Virtual size: 571KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ