Details7101.iso
- SHA256 6a8619c9bb43784de4c77b858ba0f8ea7d51438c9831c60a25a72728c3148aad
Static task
static1
Behavioral task
behavioral1
Sample
Details.lnk
Resource
win7-20220812-en
windows7-x64
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Details.lnk
Resource
win10v2004-20220812-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
disallowable/expiated.cmd
Resource
win7-20220901-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
disallowable/expiated.cmd
Resource
win10v2004-20220812-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
disallowable/footballers.dll
Resource
win7-20220812-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral6
Sample
disallowable/footballers.dll
Resource
win10v2004-20220901-en
windows10-2004-x64
3 signatures
150 seconds
General
- Target Details7101.iso
- Size 724KB
- Sample221028-dd39baeda8
- SHA256 6a8619c9bb43784de4c77b858ba0f8ea7d51438c9831c60a25a72728c3148aad
- MD5 89c15fbe5e7d6c958121262dcbe387be
- SHA1 832ce0b677cb9f5546be51c5ac002a0987584655
- SHA512 ef52ca4f75499c4c76ac2ba56100e549883d6c6495c01c49eb4b617ced903543407d8e97d362dadfb1aeaff2372c5cfb5a1c147ed32015604c299baab9aaf907
- SSDEEP 12288:ZqdD/sblafl4M/8toGXJZ6diNjpo8Ywr6t57AKCW3wdOcUwDOMHHCgOWeO:Zqdclafl4eGXuiNW8Ye6cWw4wrHHCgO+
- MD5 SHA1 SHA512 SSDEEP
Score
N/A
Malware Config
Signatures
File Explorer
-
Details7101.iso.iso 724KB
-
Details.lnk.lnk 1KB
-
disallowable/expiated.cmd347B
-
disallowable/footballers.dat.dll 422KB
-
disallowable/plod.txt117KB
-
disallowable/replicates.txt123KB
Details.lnk
- SHA256 e6cb04ff892f951faa671dfa5888254715ff332dad732ef2c11c2abffce8e703
- MD5 0ed29fb82183c419d45096dc9876eeb1
- SHA1 b7f3327a5a43f19b6a89f1943e574704e5e57227
- SHA512 f8a5d30d2ff439003894595f0ef5f6a20c82ad3be56bbb71ab9171a4d24bf9149417ca00688051dbd41dd19eff661ebdcb61f25f7941856447df2e618acf7a01
- MD5 SHA1 SHA512
disallowable/expiated.cmd
- SHA256 f1afcef0c6618cd4bd0889b1844a89ea0d259c4e292f8e109ea17405e56b5a39
- MD5 c130cc03a0c0b1d4c9284c236fefbc25
- SHA1 0dee60c3a561ee60af3d5646a7a19829b8e59b48
- SHA512 30227607f37cf8d6201505018a48438fe1a33832714a8405e241f98e6070b3d13a49ee07f11234fc39e55d239a23c622cfd30f68395489d0099d873cdc1fece8
- MD5 SHA1 SHA512
disallowable/footballers.dat
- IMPHASH fae84ade86333bc16f134b64e603e945
- SHA256 740cdb22935281aa5b7c7171032cab59b7ce678414f7b8804132cf1edad44dbd
- MD5 d4102defbe24aad31449a9790a5c6449
- SHA1 2ee1bf907aff188094829320ce6cc451772cc49c
- SHA512 d68bbe4000c48222774c2d426ef2b8927b3b8154567b70c409c4c68cee82496be3a0500eaa0805007a883e90bf94648975a145a88c302457b43907018da99842
- SSDEEP 12288:eqdD/sblafl4M/8toGXJZ6diNjpo8Ywr6t57AKC:eqdclafl4eGXuiNW8Ye6c
- MD5 SHA1 SHA512 SSDEEP
Minor OS version
Major OS version
Entry point
31398
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
GetModuleFileNameA
HeapCreate
CreateNamedPipeA
LockFile
PeekNamedPipe
GetCurrentThreadId
HeapWalk
GetModuleHandleA
SetCurrentDirectoryA
GetCommandLineA
GetFileInformationByHandle
CallNamedPipeA
GetLastError
CreateFileA
GetCurrentThread
DeleteFileA
CloseHandle
CreateThread
GetWindowsDirectoryA
UnlockFile
GetProcAddress
GetFileSize
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
InterlockedFlushSList
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
LCMapStringW
GetStdHandle
GetFileType
GetACP
GetStringTypeW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
SetStdHandle
HeapSize
HeapReAlloc
SetFilePointerEx
WriteConsoleW
ReadFile
ReadConsoleW
DecodePointer
CreateFileW
RaiseException
DllRegisterServer
Name
.text
Size
127KB
Virtual Size
127KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
215KB
Virtual Size
215KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
71KB
Virtual Size
73KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
164B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
disallowable/plod.txt
- SHA256 ac2d04eba7f7b9a89896abb172dd3b41bc94e590f46e1d3991df15fce02dfc32
- MD5 5c3005ab02cc526fce33d0cc11dd2adc
- SHA1 de7314744e694ed6d33d452e8524910a094208cc
- SHA512 887be7d4da37102875ffb5b1941778de858d7f20f0cad43304a57057f6de42ff8a9ba12d57c3adc8cb14812e3e6b982a91013b98a7d4319ecc31f4d61e59486b
- SSDEEP 3072:Z/1ZOHj/WZOZwbzzstSOjoj/tQLQuoA9w3j/tQMHH2zj1ZOm:XKW0wySBOcA9wDOMHH4/
- MD5 SHA1 SHA512 SSDEEP
disallowable/replicates.txt
- SHA256 08eec7ede502b333a499cdc80d1458261d58dfb35a54439f8c40dd77aea78edd
- MD5 6da8a70cb43360a0f0b50aac3bd49b79
- SHA1 44391222dcac074bdf493497723fc4cfb43ee081
- SHA512 78ac7fd85331d365a640892e3cb34cf1636f3fc4242ffaff06b63441b000e5e1d2c0cc13fc1d985aba05fd71d9ac18948c813bfa7080e298426e93a504b04bdb
- SSDEEP 1536:o8l2ZxM7aBOnEUbU8nUQQQk+xvrtU8njUxBMaBqfxvr8neQkGuZkD:XkMwkEIUQQQk+njive4eQkGuZkD
- MD5 SHA1 SHA512 SSDEEP