Behavioral task
behavioral1
Sample
KeepTalkingAndNobodyExplodes/KeepTalkingAndNobodyExplodes/Bomb Defusal Manual en Español.pdf
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
KeepTalkingAndNobodyExplodes/KeepTalkingAndNobodyExplodes/Bomb Defusal Manual en Español.pdf
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
KeepTalkingAndNobodyExplodes/KeepTalkingAndNobodyExplodes/Bomb Defusal.exe
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
KeepTalkingAndNobodyExplodes/KeepTalkingAndNobodyExplodes/Bomb Defusal.exe
Resource
win10v2004-20220812-en
General
-
Target
KeepTalkingAndNobodyExplodes.rar
-
Size
64.8MB
-
MD5
c7635d10cfb6260f1a295a15b07d5201
-
SHA1
979c4ac7d06b22be78e59499441c38c92abe64a7
-
SHA256
c41538690c80cbd63be940190ea01fce46c49b81f44e2dbbf823b805de424616
-
SHA512
d855b002609e141dbbe55b31e233f57180422f1b7cec56108ab3591339969234fe7482c7ec31373cd45e704912e1f0f95354726ba4bc44a1d4576dc85d85003b
-
SSDEEP
1572864:ZhH8rTI314adjf+olgYjfloYO5qhzhT27ZKrhKO:bCTwW2fyMf+7whz12700O
Malware Config
Signatures
-
resource yara_rule static1/unpack001/KeepTalkingAndNobodyExplodes/KeepTalkingAndNobodyExplodes/Bomb Defusal.exe upx
Files
-
KeepTalkingAndNobodyExplodes.rar.rar
-
KeepTalkingAndNobodyExplodes/KeepTalkingAndNobodyExplodes/Bomb Defusal Manual en Español.pdf.pdf
-
KeepTalkingAndNobodyExplodes/KeepTalkingAndNobodyExplodes/Bomb Defusal.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE