Static task
static1
Behavioral task
behavioral1
Sample
deflated-rufus_Installer.exe
Resource
win7-20220812-en
General
-
Target
deflated-rufus_Installer.exe
-
Size
2.6MB
-
MD5
9814a046255e18128a7605b718efca93
-
SHA1
5d83e5f3931720fce6ccb43186391f3114124679
-
SHA256
047528fe2e0b207d93b51f21109eea05ece9bec290c8ddf22a09301bf262735a
-
SHA512
bf2f9346bc2296542ae6818df770ad922034e40eb35928c513189edb81df52a7f6b8f53b0b645785902c8ed30f2f578a5361d8bb6ebb8883d5d5f794d3bb20f0
-
SSDEEP
49152:3mJQWFAlO5SRY8mYzbNKrFtbrR4S2EypQ2QbQQ69cE:2HAOTYvYbDypQ2QbOF
Malware Config
Signatures
Files
-
deflated-rufus_Installer.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ