Overview
overview
3Static
static
1resident e...co.rar
windows10-1703-x64
3resident e...co.rar
windows10-2004-x64
3game.exe
windows10-1703-x64
3game.exe
windows10-2004-x64
3resident e...nt.nfo
windows10-1703-x64
1resident e...nt.nfo
windows10-2004-x64
1resident e...to.exe
windows10-1703-x64
1resident e...to.exe
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
resident evil 4-Videotutoriales-Darketoxico.rar
Resource
win10-20230220-es
Behavioral task
behavioral2
Sample
resident evil 4-Videotutoriales-Darketoxico.rar
Resource
win10v2004-20230220-es
Behavioral task
behavioral3
Sample
game.exe
Resource
win10-20230220-es
Behavioral task
behavioral4
Sample
game.exe
Resource
win10v2004-20230220-es
Behavioral task
behavioral5
Sample
resident evil 4 complement.nfo
Resource
win10-20230220-es
Behavioral task
behavioral6
Sample
resident evil 4 complement.nfo
Resource
win10v2004-20230221-es
Behavioral task
behavioral7
Sample
resident evil 4 complemento.exe
Resource
win10-20230220-es
Behavioral task
behavioral8
Sample
resident evil 4 complemento.exe
Resource
win10v2004-20230220-es
General
-
Target
resident evil 4-Videotutoriales-Darketoxico.rar
-
Size
70.7MB
-
MD5
4b74a122baa48e79e622a8adf9365bff
-
SHA1
74f23f9cff6f5e676af54defb98e824ffc7a289c
-
SHA256
ea4b30a152bcfb692269d66d6051062cbb2fadcbdb7e7aeca7e979d6a4fd5737
-
SHA512
d7309d0f555e645e63bd4880c33a56e382915c7e058a94dd08ecbceb0a2810c371aba4370e26bde30015c55b8102c701f6e46f63cb46ce091cd687d179c3d692
-
SSDEEP
1572864:72GN6oWMWBo346/h1kmzpMG2nwacb0qEY57UAVOxM39DD8ASFa7fOB:qGNiMWBo3tkmzSGpHb0qEYgx63SgrOB
Malware Config
Signatures
Files
-
resident evil 4-Videotutoriales-Darketoxico.rar.rar
-
game.exe.exe windows x86
ed19d7b4553cde2bb49aecde0b483830
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineW
GetModuleHandleA
FindClose
WideCharToMultiByte
GetVersionExA
MultiByteToWideChar
CloseHandle
ReadFile
WriteFile
GetLastError
SetFilePointer
GetFileSize
TerminateThread
GetCurrentDirectoryA
MoveFileA
DeleteFileA
SetFileAttributesA
CreateDirectoryA
GetFileAttributesA
SetFileTime
CreateFileA
GetModuleFileNameA
LoadLibraryA
FindNextFileA
FindFirstFileA
RemoveDirectoryA
GetCurrentProcessId
Sleep
GetThreadPriority
SetThreadPriority
GetProcAddress
FreeLibrary
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
RtlUnwind
RaiseException
GetStartupInfoA
GetCommandLineA
ExitThread
GetCurrentThreadId
CreateThread
HeapAlloc
HeapFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
SetUnhandledExceptionFilter
HeapReAlloc
TerminateProcess
GetCurrentProcess
HeapSize
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
InterlockedExchange
VirtualQuery
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
GetLocaleInfoA
VirtualProtect
GetSystemInfo
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
user32
MoveWindow
GetWindowRect
SystemParametersInfoA
GetClientRect
ReleaseDC
GetSystemMetrics
GetDC
TranslateMessage
IsDialogMessageA
IsWindow
TranslateAcceleratorA
DispatchMessageA
ScreenToClient
IsChild
WindowFromPoint
GetMessageA
PeekMessageA
DefWindowProcA
GetWindowLongA
PostQuitMessage
UnregisterClassA
RegisterClassExA
LoadCursorA
GetDlgItem
SetFocus
EnableWindow
PostMessageA
ShowWindow
LoadIconA
BeginPaint
SetDlgItemTextA
CreateWindowExA
MessageBoxW
FrameRect
EndPaint
SetRect
GetSysColorBrush
FillRect
InvalidateRect
UpdateWindow
MessageBoxA
SetWindowLongA
ole32
OleInitialize
OleUninitialize
gdi32
GetStockObject
DeleteObject
BitBlt
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
advapi32
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegCloseKey
RegQueryValueExA
shell32
ShellExecuteA
SHGetPathFromIDListA
SHGetMalloc
SHGetDesktopFolder
Sections
.text Size: 180KB - Virtual size: 178KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
resident evil 4 complement.nfo
-
resident evil 4 complemento.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.asx-0 Size: 253B - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.asx-1 Size: 39KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE