Static task
static1
Behavioral task
behavioral1
Sample
502833272391_RPY_29102022/502833272391_RPY_29102022.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
502833272391_RPY_29102022/502833272391_RPY_29102022.exe
Resource
win10v2004-20220812-en
General
-
Target
8249613622.zip
-
Size
362KB
-
MD5
2ccb3dc2b940da38ea97bccf8c31aff0
-
SHA1
f25b164eb5c6df5f19c35314dfb32c24813d4e7e
-
SHA256
8aa6fc94f5f98c46afa16074ceec292c74b0ef9368643f21759f54f6e32f535f
-
SHA512
7476df4d8457b0c35224a39fb1d134ed188eb8690ddb2a7e7c9a9a5f8d7c612328fa2aa5dcb145d4b7b49d6e961a06feca3ff140cc2c4f08e06bc46b4566ad68
-
SSDEEP
6144:Wmb8AC4jf2ttew1X1LWIfcsHOm8Tq5oLZwhjJttHqT0AHt69ZAk799onqkXz9jd7:WmbqTttes1W8wTq5od4jsT0WtwAk7OLf
Malware Config
Signatures
Files
-
8249613622.zip.zip
Password: infected
-
8bac416d2b124650f264e2f5ea2920c62fdd3456955c0d47c7a09494d1607fd6.7z
-
502833272391_RPY_29102022/502833272391_RPY_29102022.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 6.5MB - Virtual size: 6.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ