Behavioral task
behavioral1
Sample
mp.cd.ripper.v4.01.build.3-patch AT4RE.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
mp.cd.ripper.v4.01.build.3-patch AT4RE.exe
Resource
win10v2004-20220901-en
General
-
Target
17f904b1c3a0291c87db50666fea5c372fb342ed42062fc8e256ecff7f173aeb
-
Size
261KB
-
MD5
75465652b3d22c165549e6508125942c
-
SHA1
acf3e6afce9dd6b959c61d31cc4dfea17df5a510
-
SHA256
17f904b1c3a0291c87db50666fea5c372fb342ed42062fc8e256ecff7f173aeb
-
SHA512
0fae876a9adf12bb5ff81702754f96ddb0dbf0e94772489cb39612ed1080aa81e59446b8a9d9fa8cfebe825574fa3972cea045041a2d1c70cfd059351bdb40f0
-
SSDEEP
6144:nohzj/zN4cnSoPPdush7TKL/OaTJqYpsPqs:noV/fzPP4sh7uiCJqVPf
Malware Config
Signatures
-
resource yara_rule static1/unpack001/mp.cd.ripper.v4.01.build.3-patch AT4RE.exe upx
Files
-
17f904b1c3a0291c87db50666fea5c372fb342ed42062fc8e256ecff7f173aeb.rar
-
AT4RE.nfo
-
mp.cd.ripper.v4.01.build.3-patch AT4RE.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 528KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 219KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE