Behavioral task
behavioral1
Sample
Serial Key.lnk
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Serial Key.lnk
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
activation.bat
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
activation.bat
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
flashplayer32pp_en_install.exe
Resource
win7-20230712-en
General
-
Target
flashplayer32pp_en_install.zip
-
Size
3.9MB
-
MD5
96111dde4548bd779af947f588d894ff
-
SHA1
97bc4e15bfcca5128cf625f5a68f862fc31ccb87
-
SHA256
f088dfdb6d69305a8e219feea70fae8d18095d3b5dd04831a7a43cab5f9b1d8a
-
SHA512
314e48b8f97e561b4b48cf789e18685f4761bd99fa3f312eec2e82cdcec57c6367e64038eb4ed0da462057626c19e76429711df73c1de98369b004d2893c9b9e
-
SSDEEP
98304:NyA1tSJu6OR1RfdU2pEQ0JxW73JSWfLimC3OwlGp+R9MvPt8qJ:IA1tSJbORLOUEzMlSWDvCyp4qvPtPJ
Malware Config
Signatures
-
resource yara_rule static1/unpack001/flashplayer32pp_en_install.exe themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/flashplayer32pp_en_install.exe
Files
-
flashplayer32pp_en_install.zip.zip
-
Serial Key.lnk.lnk
-
activation.bat
-
flashplayer32pp_en_install.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 309KB - Virtual size: 559KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 54KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 4KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 710KB - Virtual size: 709KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 22KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 4.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ