Static task
static1
Behavioral task
behavioral1
Sample
Pro warz/Warz Hacking.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Pro warz/Warz Hacking.exe
Resource
win10v2004-20221111-en
General
-
Target
b65dd0dc03fc76a6c3176148652c2a87a2b4689d2709718a14895115b47fd0ee
-
Size
1.5MB
-
MD5
00232addf78ee7631d3df2398f4dcf89
-
SHA1
906234d2ea29b626ca937fb6d25e63ce9ce6a6b7
-
SHA256
b65dd0dc03fc76a6c3176148652c2a87a2b4689d2709718a14895115b47fd0ee
-
SHA512
dc44991a305d80b2921a76746137f99a2d9eb8bb4334a1fd0f96be0bf7d55d71d46994acf8726438ba542aec99393bfd9fdb9f8c5ede65e7097afb7a39eb20e3
-
SSDEEP
24576:BwK8XtPM+QCrHfyCxlcUgYoiLB/mcz5abmwCBOuNO+tpX43/Wsps:eHn7fyMgYtZNDkuNO+/o3/W+s
Malware Config
Signatures
Files
-
b65dd0dc03fc76a6c3176148652c2a87a2b4689d2709718a14895115b47fd0ee.7z
-
Pro warz/Warz Hacking.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 129B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Pro warz/วิธีใช้.txt