Static task
static1
Behavioral task
behavioral1
Sample
Invoker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Invoker.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
Invoker.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
Invoker.exe
Resource
win10v2004-20231215-en
General
-
Target
51e851cc06eb6570cff03cb6c16cacfb
-
Size
3.7MB
-
MD5
51e851cc06eb6570cff03cb6c16cacfb
-
SHA1
03faef61db06ce37b7a864455c02f15834b73427
-
SHA256
51dff72038c516b9a884cf763c33187bb61190161a6a4137b2a54f687a14e7fe
-
SHA512
c80f95436eafb74efbe482c06134944031b3a53614071703b08743a10e6a5b4b39f747d8b8eb817342466e45f7e0d067b77d00159a52fc9a394d98966e098e50
-
SSDEEP
98304:UisVkEHo/EjlUR6dakaDRn0ZT6baHX2RGk1m+AmaZhAL2i:UAEHo+KjfDRn8Tkam4oVAhrAz
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Invoker.dll unpack001/Invoker.exe
Files
-
51e851cc06eb6570cff03cb6c16cacfb.rar
-
1_0207兩刀優化+死騎光刀識別.ABL
-
2_0207舊版人物+兩刀優化+死騎光刀識別.ABL
-
3_0207加快版_兩刀優化+死騎光刀識別.ABL
-
4_0207加快版舊版人物+兩刀優化+死騎光刀識別.ABL
-
5_0207加快版_兩刀優化+死騎光刀識別+白金魔法陣.ABL
-
6_0207加快版舊版人物+兩刀優化+死騎光刀識別+白金魔法陣.ABL
-
Cod.ini
-
Invoker.dll.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 11KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Invoker.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
scjxvteu Size: 84KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hhscoutp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rsggwyci Size: 708KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kqlbagyk Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
LegalConnect.ini
-
Setup.ini