Static task
static1
Behavioral task
behavioral1
Sample
posExtracter/posExtracter.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
posExtracter/posExtracter.exe
Resource
win10v2004-20221111-en
General
-
Target
feed865d84eafe55e7ceb8db95f531e10219764fcda4518beb609ddf288953c6
-
Size
174KB
-
MD5
67fc0a2d03e4c4d9afbb38e3af08b2b6
-
SHA1
cd0ac831f89306c327374408653abe6c662c3677
-
SHA256
feed865d84eafe55e7ceb8db95f531e10219764fcda4518beb609ddf288953c6
-
SHA512
a9f2e30ed24ce90bd3eec5d4e02b103f62e9d980aa1a19272973c9fc8ebfc3d215f697ec8602169e316f722fb76cf7bd34a4a45b73258deb220ab2c0519ff546
-
SSDEEP
3072:dpOB9zqRdL5OkSRmknMULZ5mnlii2ZYH5ROchxoL3JxclSXJNX+Du9Kf3PU60kDB:S92RdL5Z8QN2MntP83JelSXJskKf/0m
Malware Config
Signatures
Files
-
feed865d84eafe55e7ceb8db95f531e10219764fcda4518beb609ddf288953c6.7z
-
posExtracter/Readme.txt
-
posExtracter/gamedata/config/ui/ui_pe.xml.xml
-
posExtracter/gamedata/scripts/posextr.script
-
posExtracter/gamedata/scripts/ui_main_menu.script
-
posExtracter/posExtracter.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 760KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
-
posExtracter/xray_nik.log