Static task
static1
Behavioral task
behavioral1
Sample
India CI PL Puss N Boots rev.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
India CI PL Puss N Boots rev.exe
Resource
win10v2004-20220901-en
General
-
Target
India CI PL Puss N Boots rev�.zip
-
Size
355KB
-
MD5
5dbcaf19f445bd7d6777b38763fc17e4
-
SHA1
0114886896b9e89b91b3b391297cd2741ff4d57e
-
SHA256
0e97a4e932e5eaa3f62473d8865ab55950183d7b0ed04cff3d06a96c2d919cdd
-
SHA512
5931b38b2908dee8ec54bbb88660194a023bf3781842472b9eb9b6f087ac53dca54123eee93a1de4a35067300f7ad07faa65ea7a8c4acf1f5e3cb5ec32e2b1a9
-
SSDEEP
6144:dJ8O7RQ1ywVrdevc658TpEUhvKxgD8aQq9tNxBXUyZtBRnjPvSpGCd:dJ8O7VwN60yOLTXtBGBd
Malware Config
Signatures
Files
-
India CI PL Puss N Boots rev�.zip.zip
-
India CI PL Puss N Boots rev.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 475KB - Virtual size: 474KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ