Behavioral task
behavioral1
Sample
GIS.exe
Resource
win10v2004-20231127-en
General
-
Target
GIS_0.0.49.7z
-
Size
393KB
-
MD5
c30228cf86f49297ec88e3f22f533c3f
-
SHA1
82030f3ce99472b9bca71c14713d7b7e0db1b8a1
-
SHA256
5def5669d2e6da7424186daed054e8393c2a31128ce3d88cfe234d3ff84e8ef8
-
SHA512
07e6cf4c3e30ecb7d2004c383acc3613083f9eab600a1824aa93c1cf9b17d85b32e62cbadb2d87d785e991793a3db45eee0e3720e3eb68e7455af8916f62bdde
-
SSDEEP
12288:cYcN0xBnLe77IMDNFZyplBfzxH6HW5d+/Ay:LM0xBY7v5FZYlB9HeWq/Ay
Malware Config
Signatures
-
resource yara_rule static1/unpack001/GIS.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/GIS.exe
Files
-
GIS_0.0.49.7z.7z
-
GIS.exe.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 884KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 381KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
character.ini
-
config.ini
-
data/character/albedo.json
-
data/character/alhaitham.json
-
data/character/aloy.json
-
data/character/amber.json
-
data/character/arataki_itto.json
-
data/character/baizhu.json
-
data/character/barbara.json
-
data/character/beidou.json
-
data/character/bennett.json
-
data/character/candace.json
-
data/character/chongyun.json
-
data/character/collei.json
-
data/character/cyno.json
-
data/character/dehya.json
-
data/character/diluc.json
-
data/character/diona.json
-
data/character/dori.json
-
data/character/eula.json
-
data/character/faruzan.json
-
data/character/fischl.json
-
data/character/ganyu.json
-
data/character/gorou.json
-
data/character/hu_tao.json
-
data/character/index.json
-
data/character/jean.json
-
data/character/kaedehara_kazuha.json
-
data/character/kaeya.json
-
data/character/kamisato_ayaka.json
-
data/character/kamisato_ayato.json
-
data/character/kaveh.json
-
data/character/keqing.json
-
data/character/klee.json
-
data/character/kujou_sara.json
-
data/character/kuki_shinobu.json
-
data/character/layla.json
-
data/character/lisa.json
-
data/character/mika.json
-
data/character/mona.json
-
data/character/nahida.json
-
data/character/nilou.json
-
data/character/ningguang.json
-
data/character/noelle.json
-
data/character/qiqi.json
-
data/character/raiden_shogun.json
-
data/character/razor.json
-
data/character/rosaria.json
-
data/character/sangonomiya_kokomi.json
-
data/character/sayu.json
-
data/character/shenhe.json
-
data/character/shikanoin_heizou.json
-
data/character/sucrose.json
-
data/character/tartaglia.json
-
data/character/thoma.json
-
data/character/tighnari.json
-
data/character/traveler.json
-
data/character/venti.json
-
data/character/wanderer.json
-
data/character/xiangling.json
-
data/character/xiao.json
-
data/character/xingqiu.json
-
data/character/xinyan.json
-
data/character/yae_miko.json
-
data/character/yanfei.json
-
data/character/yaoyao.json
-
data/character/yelan.json
-
data/character/yoimiya.json
-
data/character/yun_jin.json
-
data/character/zhongli.json
-
data/dictionary/character.json
-
data/dictionary/misc.json
-
data/misc/character-e-charge.json
-
data/misc/shape-forbidden.json
-
off.ico
-
on.ico
-
readme.url