Behavioral task
behavioral1
Sample
PSF-UnrealBoard.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
PSF-UnrealBoard.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
PerX.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
PerX.exe
Resource
win10v2004-20231215-en
General
-
Target
10aa07d06b7256f5519acc606ecfdb87
-
Size
421KB
-
MD5
10aa07d06b7256f5519acc606ecfdb87
-
SHA1
217713ec0f0227c7f0cc63a6f94d9c4329e4a548
-
SHA256
5b330b60a9aa0518a1d9d0490902d3eb3154deb40f46e56a232400dafef46061
-
SHA512
4921d168bd2029517d22e18ed6565e399a05e8d104bb3b01f28a7450c133cb452af256592463c7006f843149f58b1e2e37b772af733996788222c25e0448bf9b
-
SSDEEP
6144:8An8eh0zPG5fWZjGokY8PMDFlXAIZmhlgeI7JafU6z1bKEY43iR7FQSDm+ytGuI8:8dlPG5f9YE4XghmJmU0Ah4K0+y/I/ptE
Malware Config
Signatures
-
resource yara_rule static1/unpack001/PerX.exe upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/PSF-UnrealBoard.dll unpack001/PerX.exe
Files
-
10aa07d06b7256f5519acc606ecfdb87.rar
-
PSF-UnrealBoard.dll.dll windows:1 windows x86 arch:x86
99f6e96a7a6d9aa5c0e76eb1151ab9ec
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateThread
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
FreeLibrary
Sleep
GetProcessHeap
HeapAlloc
HeapFree
CreateFileA
WriteFile
SetFilePointer
CloseHandle
GetTimeFormatA
iphlpapi
GetAdaptersInfo
msvcrt
sprintf
strtol
mbstowcs
srand
rand
time
shell32
ShellExecuteA
Sections
.data Size: 345KB - Virtual size: 345KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 517KB - Virtual size: 516KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 690B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
PerX.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 452KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 169KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
PerX.ini