651[.]EXE[.]zip | Triage

Submit
Reports

Overview

overview

1

Static

static

651.dll

windows7-x64

1

651.dll

windows10-2004-x64

1

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

651.dll

Resource

win7-20220901-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

651.dll

Resource

win10v2004-20221111-en

windows10-2004-x64

1 signatures

150 seconds

General

Target

651.EXE.zip
Size

2.1MB
MD5

0e0445edc9c7369fb40dfd093474f343
SHA1

2a3f89f6626ac158a46eb9273d36fd514476f5f0
SHA256

a0838b0d22cb7bf10c10205ce4e56392282f47bc82af732f05d4c81ef07eb926
SHA512

90a3e37850f2ee0c4af6089ed7bfd40061fbe8a094f6d77b3d93a89a833d5febedea9b0d4f9c6964c398b5afb508b15376a0c8274d5986869389852158be02c9
SSDEEP

24576:XsInJdT5KfKFkvIOpW5bwafo2Cf0YV66N86ZmK30luirgmSneTV9:XLJdF/KJ2JYuI3Lisnnw

Score

N/A

Malware Config

Signatures

Files

651.EXE.zip
.zip
651.EXE
.dll windows x86

db11e15508ae3ee14f69855fb244390e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject

Exports

Exports

OnePro
ThrPro
TwoPro

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 489.6MB - Virtual size: 489.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
__MACOSX/._651.EXE

© 2018-2024

Terms | Privacy