darkside-main[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

darkside-main.zip
Size

129KB
MD5

ede38b854967e345b5098a682fe34543
SHA1

49979a7dc343d6b9a4446f9b62b622d8b4cfef74
SHA256

8f89ead036fde496467f1ce100b27948d5a72aa316f645dcc79d5cfc739164b6
SHA512

a634b119741f80e9da1e2e5c659546a566e3a7f55e92c8521d747011c841672568eeeb852aee6f647a2534c05049dc03c15083f3a51520cebb5a064ba85afee4
SSDEEP

3072:xOBsdXL4Xo42LtWEcAXJSFc0nUxu5Erik0aW9MaG8xEQOnx:xOC5IMNP590euzFPG8xEQ+

Score

3^/10

Malware Config

Signatures

Unsigned PE 4 IoCs

Checks for missing Authenticode signature.

resource
unpack002/acer.exe
unpack003/151fbd6c299e734f7853497bd083abfa29f8c186a9db31dbe330ace2d35660d5.exe
unpack004/156335b95ba216456f1ac0894b7b9d6ad95404ac7df447940f21646ca0090673.dll
unpack005/8cfd28911878af048fb96b6cc0b9da770542576d5c2b20b193c3cfc4bde4d3bc.exe

Files

darkside-main.zip
.zip
darkside-main/.DS_Store
darkside-main/0a0c225f0e5ee941a79f2b7701f1285e4975a2859eb4d025d96d9e366e81abb9.zip
.zip

Password: infected
acer.exe
.exe windows:5 windows x86 arch:x86

d7eea11ae47ec0d735ecd47e54de8af5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess

ntdll

NtWriteVirtualMemory
NtReadVirtualMemory

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text1
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
darkside-main/151fbd6c299e734f7853497bd083abfa29f8c186a9db31dbe330ace2d35660d5.zip
.zip

Password: infected
151fbd6c299e734f7853497bd083abfa29f8c186a9db31dbe330ace2d35660d5.exe
.exe windows:5 windows x86 arch:x86

17a4bd9c95f2898add97f309fc6f9bcd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
ExitProcess

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 374B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
darkside-main/156335b95ba216456f1ac0894b7b9d6ad95404ac7df447940f21646ca0090673.zip
.zip

Password: infected
156335b95ba216456f1ac0894b7b9d6ad95404ac7df447940f21646ca0090673.dll
.dll windows:5 windows x86 arch:x86

6c8408bb5d7d5a5b75b9314f94e68763

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text1
Size: 1024B - Virtual size: 795B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 446B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
darkside-main/8cfd28911878af048fb96b6cc0b9da770542576d5c2b20b193c3cfc4bde4d3bc.zip
.zip

Password: infected
8cfd28911878af048fb96b6cc0b9da770542576d5c2b20b193c3cfc4bde4d3bc.exe
.exe windows:5 windows x86 arch:x86

17a4bd9c95f2898add97f309fc6f9bcd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
ExitProcess

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 374B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
darkside-main/README.md

Sharing

General

Malware Config

Signatures

Files

Password: infected

d7eea11ae47ec0d735ecd47e54de8af5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ntdll

Sections

.text Size: 37KB - Virtual size: 36KB

.text1 Size: 1024B - Virtual size: 736B

.rdata Size: 512B - Virtual size: 448B

.data Size: 12KB - Virtual size: 78KB

.ndata Size: 4KB - Virtual size: 4KB

Password: infected

17a4bd9c95f2898add97f309fc6f9bcd

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 28KB - Virtual size: 28KB

.rdata Size: 512B - Virtual size: 374B

.data Size: 26KB - Virtual size: 33KB

.reloc Size: 3KB - Virtual size: 2KB

Password: infected

6c8408bb5d7d5a5b75b9314f94e68763

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 36KB - Virtual size: 36KB

.text1 Size: 1024B - Virtual size: 795B

.rdata Size: 512B - Virtual size: 446B

.data Size: 12KB - Virtual size: 14KB

.ndata Size: 3KB - Virtual size: 3KB

Password: infected

17a4bd9c95f2898add97f309fc6f9bcd

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 29KB - Virtual size: 28KB

.rdata Size: 512B - Virtual size: 374B

.data Size: 26KB - Virtual size: 33KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 37KB - Virtual size: 36KB

.text1
Size: 1024B - Virtual size: 736B

.rdata
Size: 512B - Virtual size: 448B

.data
Size: 12KB - Virtual size: 78KB

.ndata
Size: 4KB - Virtual size: 4KB

.text
Size: 28KB - Virtual size: 28KB

.rdata
Size: 512B - Virtual size: 374B

.data
Size: 26KB - Virtual size: 33KB

.reloc
Size: 3KB - Virtual size: 2KB

.text
Size: 36KB - Virtual size: 36KB

.text1
Size: 1024B - Virtual size: 795B

.rdata
Size: 512B - Virtual size: 446B

.data
Size: 12KB - Virtual size: 14KB

.ndata
Size: 3KB - Virtual size: 3KB

.text
Size: 29KB - Virtual size: 28KB

.rdata
Size: 512B - Virtual size: 374B

.data
Size: 26KB - Virtual size: 33KB

.reloc
Size: 3KB - Virtual size: 2KB