Behavioral task
behavioral1
Sample
iPerelivashka/iPerelivashka.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
iPerelivashka/iPerelivashka.exe
Resource
win10v2004-20231215-en
General
-
Target
0d9bd08cf5feb63e3be23b8df18716c1
-
Size
640KB
-
MD5
0d9bd08cf5feb63e3be23b8df18716c1
-
SHA1
33ad92135f325b93da1e0a175a2433cd5fcef0c7
-
SHA256
c9f0fb6d5cd32fe45edcd5c0eea4e80892cdd2f7ebaef3a7c51c930962f1c8a0
-
SHA512
733542b31a16908e94474835d183232f64560bb138dd758be35d9351d9b3d491d70201354ae3dcac508a7068ae650f8a3e88dbf9cddcddf8dc41a57fcb6b772c
-
SSDEEP
12288:JwEHABMpMvmu94uL0OFQ0dkQDpA19OXY/UAMGw7FHhTDkPIfc5Ko:JLWMi5oOFDdkQDXzAMGuhTDffRo
Malware Config
Signatures
-
resource yara_rule static1/unpack001/iPerelivashka/iPerelivashka.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/iPerelivashka/iPerelivashka.exe
Files
-
0d9bd08cf5feb63e3be23b8df18716c1.7z
-
iPerelivashka/iPerelivashka-0001.ipf
-
iPerelivashka/iPerelivashka-0002.ipf
-
iPerelivashka/iPerelivashka-0003.ipf
-
iPerelivashka/iPerelivashka-0004.ipf
-
iPerelivashka/iPerelivashka-0005.ipf
-
iPerelivashka/iPerelivashka-0006.ipf
-
iPerelivashka/iPerelivashka-0007.ipf
-
iPerelivashka/iPerelivashka-0008.ipf
-
iPerelivashka/iPerelivashka-0009.ipf
-
iPerelivashka/iPerelivashka-0010a.ipf
-
iPerelivashka/iPerelivashka-0010b.ipf
-
iPerelivashka/iPerelivashka-0011.ipf
-
iPerelivashka/iPerelivashka-0012.ipf
-
iPerelivashka/iPerelivashka-0013.ipf
-
iPerelivashka/iPerelivashka-0014.ipf
-
iPerelivashka/iPerelivashka-0015.ipf
-
iPerelivashka/iPerelivashka-0016a.ipf
-
iPerelivashka/iPerelivashka-0016b.ipf
-
iPerelivashka/iPerelivashka-0017a.ipf
-
iPerelivashka/iPerelivashka-0017b.ipf
-
iPerelivashka/iPerelivashka-0018.ipf
-
iPerelivashka/iPerelivashka-0019.ipf
-
iPerelivashka/iPerelivashka-0020.ipf
-
iPerelivashka/iPerelivashka-0021.ipf
-
iPerelivashka/iPerelivashka-0022.ipf
-
iPerelivashka/iPerelivashka-0023.ipf
-
iPerelivashka/iPerelivashka-0024.ipf
-
iPerelivashka/iPerelivashka-0025.ipf
-
iPerelivashka/iPerelivashka-0026.ipf
-
iPerelivashka/iPerelivashka-0027.ipf
-
iPerelivashka/iPerelivashka-0028.ipf
-
iPerelivashka/iPerelivashka-0029.ipf
-
iPerelivashka/iPerelivashka-0030.ipf
-
iPerelivashka/iPerelivashka-0031.ipf
-
iPerelivashka/iPerelivashka-0032.ipf
-
iPerelivashka/iPerelivashka-0033.ipf
-
iPerelivashka/iPerelivashka.exe.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 581KB - Virtual size: 584KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE