Behavioral task
behavioral1
Sample
Traduccion-53422-2-0-1-1693210399.zip
Resource
win10-20240611-en
General
-
Target
Traduccion-53422-2-0-1-1693210399.zip
-
Size
11.4MB
-
MD5
c3a8dabfb797a5505c0382ebb308ef12
-
SHA1
4b3edfb47ad260a266f541494c32d136286edb84
-
SHA256
9370367db55ac4e10f98a0db7728713227ed3e069fd27120a065adfa6be04299
-
SHA512
f002cb0fe7330394c3752d7ef20f4ebfb387c0aee87e57ba337a5049f34b46f9ff4919eb606b411a916a2e0012c941bc732b6ccc17e03bba9bddf5829311a41f
-
SSDEEP
196608:YkLUA6NSLO7QUIz595YZpr1DynUOTwPxW7MO8nmZNBKs/iPj6699M5jaak8XMsjI:l/wSLjzFYntsMeZNgs/iWW9uaakBsjI
Malware Config
Signatures
-
resource yara_rule static1/unpack001/ReOrder_Mods.exe upx -
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/ReOrder_Mods.exe unpack002/out.upx unpack001/TraduceIni.exe
Files
-
Traduccion-53422-2-0-1-1693210399.zip.zip
-
Data Files/Bookart/aldruhnregion_377_253.dds
-
Data Files/Bookart/balmoraregion_377_253.dds
-
Data Files/Bookart/cyrodiil_377_253.dds
-
Data Files/Bookart/elsweyr_377_253.dds
-
Data Files/Bookart/empire small 348x250.dds
-
Data Files/Bookart/empire small 512x368.dds
-
Data Files/Bookart/hammerfell_377_253.dds
-
Data Files/Bookart/highrock_377_253.dds
-
Data Files/Bookart/magicstonemap4.dds
-
Data Files/Bookart/morrowind_377_253.dds
-
Data Files/Bookart/redmountain_377_253.dds
-
Data Files/Bookart/sadrithmoraregion_377_253.dds
-
Data Files/Bookart/skyrim_377_253.dds
-
Data Files/Bookart/theempire_377_253.dds
-
Data Files/Bookart/valenwood_377_253.dds
-
Data Files/Bookart/vivecregion_377_253.dds
-
Data Files/Espanol - Bloodmoon.esp
-
Data Files/Espanol - Correccion Quests.esp
-
Data Files/Espanol - Morrowind.esp
-
Data Files/Espanol - Tribunal.esp
-
Data Files/Textures/Color.txt
-
Data Files/Textures/alpha.AVA
-
Data Files/Textures/basebooks.dds
-
Data Files/Textures/basemenu.dds
-
Data Files/Textures/menu_credits.dds
-
Data Files/Textures/menu_credits_over.dds
-
Data Files/Textures/menu_credits_pressed.dds
-
Data Files/Textures/menu_exitgame.dds
-
Data Files/Textures/menu_exitgame_over.dds
-
Data Files/Textures/menu_exitgame_pressed.dds
-
Data Files/Textures/menu_loadgame.dds
-
Data Files/Textures/menu_loadgame_over.dds
-
Data Files/Textures/menu_loadgame_pressed.dds
-
Data Files/Textures/menu_morrowind.dds
-
Data Files/Textures/menu_morrowind0.dds
-
Data Files/Textures/menu_newgame.dds
-
Data Files/Textures/menu_newgame_over.dds
-
Data Files/Textures/menu_newgame_pressed.dds
-
Data Files/Textures/menu_options.dds
-
Data Files/Textures/menu_options_over.dds
-
Data Files/Textures/menu_options_pressed.dds
-
Data Files/Textures/menu_return.dds
-
Data Files/Textures/menu_return_over.dds
-
Data Files/Textures/menu_return_pressed.dds
-
Data Files/Textures/menu_savegame.dds
-
Data Files/Textures/menu_savegame_over.dds
-
Data Files/Textures/menu_savegame_pressed.dds
-
Data Files/Textures/tx_menubook_cancel_idle.dds
-
Data Files/Textures/tx_menubook_cancel_over.dds
-
Data Files/Textures/tx_menubook_cancel_pressed.dds
-
Data Files/Textures/tx_menubook_close_idle.dds
-
Data Files/Textures/tx_menubook_close_over.dds
-
Data Files/Textures/tx_menubook_close_pressed.dds
-
Data Files/Textures/tx_menubook_journal_idle.dds
-
Data Files/Textures/tx_menubook_journal_over.dds
-
Data Files/Textures/tx_menubook_journal_pressed.dds
-
Data Files/Textures/tx_menubook_next_idle.dds
-
Data Files/Textures/tx_menubook_next_over.dds
-
Data Files/Textures/tx_menubook_next_pressed.dds
-
Data Files/Textures/tx_menubook_prev_idle.dds
-
Data Files/Textures/tx_menubook_prev_over.dds
-
Data Files/Textures/tx_menubook_prev_pressed.dds
-
Data Files/Textures/tx_menubook_quests_active_idle.dds
-
Data Files/Textures/tx_menubook_quests_active_over.dds
-
Data Files/Textures/tx_menubook_quests_active_pressed.dds
-
Data Files/Textures/tx_menubook_quests_all_idle.dds
-
Data Files/Textures/tx_menubook_quests_all_over.dds
-
Data Files/Textures/tx_menubook_quests_all_pressed.dds
-
Data Files/Textures/tx_menubook_take_idle.dds
-
Data Files/Textures/tx_menubook_take_over.dds
-
Data Files/Textures/tx_menubook_take_pressed.dds
-
Data Files/Textures/tx_menubook_topics_idle.dds
-
Data Files/Textures/tx_menubook_topics_over.dds
-
Data Files/Textures/tx_menubook_topics_pressed.dds
-
Data Files/Textures/variacion.AVA
-
Data Files/Textures/variacion2.AVA
-
ReOrder_Mods.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
TraduceIni.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 430KB - Virtual size: 429KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
leeme.txt