Static task
static1
Behavioral task
behavioral1
Sample
4213ds/u3yUAGt07i.exe
Resource
win7-20220812-en
General
-
Target
full.rar
-
Size
26.5MB
-
MD5
6d07b41848fd2b20117f5a71feedc8db
-
SHA1
eaa67d618cd2cf8ca8e7f95a558cb05aa7b76a7b
-
SHA256
fd7329ac9e8111fd954f2bb8abf49d684265a5de8325b7e7e4ca640ce9f8eadd
-
SHA512
6e12bc4e4e9a11d1ee610970f34a150eead20a1cfbe0757fa60caa7fc9f4ef826fd0accb6868027f962ce131fe3460377f998fd6d20dab52bb08a878299b0770
-
SSDEEP
786432:FdTpV12GHKfV1Qo4ptApCbvaiRAHpk5bEdyYhdeJAC:Fd1VzKt1QftECjbQpQEXC
Malware Config
Signatures
Files
-
full.rar.rar
Password: nyrexscript
-
4213ds/HowToUse.txt
-
4213ds/OM19H0XTY/A072C.ini
-
4213ds/OM19H0XTY/BR.ini
-
4213ds/OM19H0XTY/CN.ini
-
4213ds/OM19H0XTY/EL.ini
-
4213ds/OM19H0XTY/ES.ini
-
4213ds/OM19H0XTY/Font/HowToUse.txt
-
4213ds/OM19H0XTY/Font/VN.dds
-
4213ds/OM19H0XTY/Font/br.ttf
-
4213ds/OM19H0XTY/Font/en.ttf
-
4213ds/OM19H0XTY/Font/kr.otf
-
4213ds/OM19H0XTY/Font/sc.otf
-
4213ds/OM19H0XTY/Font/tr.ttf
-
4213ds/OM19H0XTY/GR.ini
-
4213ds/OM19H0XTY/HowToUse.txt
-
4213ds/OM19H0XTY/KR.ini
-
4213ds/OM19H0XTY/PL.ini
-
4213ds/OM19H0XTY/RU.ini
-
4213ds/OM19H0XTY/TUR.ini
-
4213ds/OM19H0XTY/TW.ini
-
4213ds/OM19H0XTY/VN.ini
-
4213ds/u3yUAGt07i.exe.exe windows x86
Password: nyrexscript
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 80KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 2.8MB - Virtual size: 5.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 14.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 10.0MB - Virtual size: 10.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 16B - Virtual size: 4KB
IMAGE_SCN_MEM_READ