Static task
static1
Behavioral task
behavioral1
Sample
ReadIRIS_v17_kg.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
ReadIRIS_v17_kg.exe
Resource
win10v2004-20230703-en
General
-
Target
ReadIRIS_v17_kg.exe
-
Size
2.6MB
-
MD5
1067711b85a5f50c51d780109349b9e1
-
SHA1
c9bbfb120a1c3e7db63f6ef696378e998132210e
-
SHA256
0c241370f0de0018abc3120a7ae3d1a76167be656d697c107dd5b9ccc2759d7b
-
SHA512
d394615962f55a292dcb87ddb69ef6f55264e6b31dfa76e9631c6cb2bbeee9e21a217134963ece97c44381e35e04f0f882aee9dde5d7bd93fe51bb9b19982e38
-
SSDEEP
49152:EV5Pf7cGwU/1fmgHomF2t7C4agB8PFNvX4G1h7VvswtOJKxusKd:y5beacgHo8qP8PFx7FZsZKxu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ReadIRIS_v17_kg.exe
Files
-
ReadIRIS_v17_kg.exe.exe windows x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 588KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
myoosnoe Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
eszgltoo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE