DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
IonCube_Decoder-master/Ironcube_Decoder.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
IonCube_Decoder-master/Ironcube_Decoder.exe
Resource
win10v2004-20230220-en
Target
9d26349b816be621409b3439eb7ebc069b01b667635a48fe6ff77e5f5f7f1471
Size
354KB
MD5
ce27971de7045d0d17f9082b42c1642e
SHA1
0c6f418119a6d25252de78d08466d02c1ec8dded
SHA256
9d26349b816be621409b3439eb7ebc069b01b667635a48fe6ff77e5f5f7f1471
SHA512
1a84f72c83876faa8b6669aaf47bc3a1c67e522f535c4041e7833544e6d0cbaba0f248f07fb1aeba4fc82fd3a63720b4ad69c28e4cd6c3454dd743dbacca7846
SSDEEP
6144:KRJ4DT4KdchXJKl5JugoduTg+UwIiNGqwTUHfgIIeVn3IpRE/Hu7tGQ:KRJLhXMugoduTg5J/qS6r3kRKO5GQ
Portable executable.
resource | yara_rule |
---|---|
static1/unpack001/IonCube_Decoder-master/Ironcube_Decoder.exe | is_a_pe |
static1/unpack001/IonCube_Decoder-master/ZlibTool.ocx | is_a_pe |
static1/unpack001/IonCube_Decoder-master/data/make_license.exe | is_a_pe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
EVENT_SINK_GetIDsOfNames
ord693
ord696
MethCallEngine
ord512
EVENT_SINK_Invoke
ord516
ord518
ord628
ord629
ord660
ord661
ord556
ord558
Zombie_GetTypeInfo
ord668
ord592
ord593
ord300
ord594
ord301
ord595
ord303
ord304
ord598
ord306
ord307
ord309
ord631
ord709
ord632
ord525
ord526
EVENT_SINK_AddRef
ord527
ord529
ord560
ord561
DllFunctionCall
ord670
Zombie_GetTypeInfoCount
EVENT_SINK_Release
ord600
ord601
ord310
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord312
ord711
ord314
ord315
ord607
ord316
ord608
ord530
ord317
ord531
ord318
ord717
ord319
ord533
ProcCallEngine
ord537
ord644
ord573
ord681
ord578
ord685
ord100
ord579
ord320
ord612
ord321
ord616
ord617
ord619
ord581
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3401
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3670
ord561
ord815
ord825
ord3952
ord2724
ord6354
ord1216
ord1168
ord6467
ord1227
ord823
ord1877
ord4249
ord2486
ord2687
ord6364
ord3326
ord6365
ord4472
ord5498
ord3278
ord3353
ord3681
ord446
ord743
ord1177
ord1226
ord1210
ord2439
ord1693
ord5618
ord994
ord4342
ord4687
ord4639
ord5674
ord2156
ord4856
ord4920
ord6002
ord2137
ord1963
ord5213
ord2953
ord3868
ord5150
ord4705
ord4707
ord2876
ord2998
ord5649
ord4661
ord4660
ord4768
ord4650
ord4903
ord4548
ord4521
ord4594
ord4988
ord4925
ord4930
ord4935
ord4659
ord4909
ord4908
ord4668
ord4667
ord4666
ord4648
ord4689
ord5023
ord4654
ord4643
ord4354
ord4780
ord4649
ord4637
ord4636
ord5060
ord4584
ord4371
ord4361
ord4356
ord5731
ord4741
ord4738
ord4409
ord4603
ord5008
ord4415
ord4992
ord4979
ord2488
ord3404
ord4539
ord2954
ord6055
ord4078
ord1776
ord4407
ord5241
ord2384
ord5163
ord6370
ord4353
ord5290
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord2446
ord2124
ord5277
ord2983
ord3148
ord3260
ord4466
ord3269
ord2986
ord3080
ord4081
ord4624
ord5825
ord3946
ord540
ord423
ord723
ord800
ord2545
ord5334
ord5332
ord2541
ord4949
ord641
ord2514
ord324
ord5261
ord1614
ord4459
ord6030
ord1685
ord924
ord858
ord4129
ord5710
ord4204
ord535
ord2795
ord860
ord1892
ord4252
ord1212
ord4570
ord4672
ord4843
ord5011
ord5265
ord4376
ord4853
ord4998
ord4713
ord6052
ord1775
ord2385
ord6371
ord5286
ord4438
ord3279
ord4625
ord4425
ord449
ord746
ord2278
ord2370
ord2288
ord2298
ord2282
ord1132
ord1116
ord1176
ord1575
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord1578
ord600
ord826
ord269
ord2512
ord2554
ord4486
ord4739
ord6375
ord1131
_mbscmp
_fileno
_filelength
exit
fprintf
??1type_info@@UAE@XZ
_iob
calloc
_adjust_fdiv
malloc
_initterm
_onexit
__dllonexit
__CxxFrameHandler
fwrite
fread
fopen
fclose
free
LocalFree
LocalAlloc
PeekMessageA
TranslateMessage
DispatchMessageA
SendMessageA
EnableWindow
ord17
LoadRegTypeLi
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LocalFree
FormatMessageA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RtlUnwind
ExitProcess
TerminateProcess
GetCurrentProcess
HeapFree
HeapAlloc
GetCurrentProcessId
HeapReAlloc
GetCommandLineA
GetVersion
GetSystemTimeAsFileTime
RaiseException
HeapSize
GetLastError
CloseHandle
ReadFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
WideCharToMultiByte
LCMapStringA
LCMapStringW
GetProcAddress
WriteFile
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
SetFilePointer
IsBadReadPtr
IsBadCodePtr
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetEndOfFile
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE