x.zip
- SHA256 d78b46dd7cf819431e921ad44bf2af3e14b838a8e94ed22a52d1cb74a06f5c9d
Static task
static1
Behavioral task
behavioral1
Sample
x.bat
Resource
win7-20230220-en
windows7-x64
4 signatures
150 seconds
General
- Target x.zip
- Size 244KB
- Sample230307-zmtbcsbd7x
- SHA256 d78b46dd7cf819431e921ad44bf2af3e14b838a8e94ed22a52d1cb74a06f5c9d
- MD5 088f1a0ac0433a546fcc946b25305477
- SHA1 d74508396b7b34538d6dc6a100ba01b04a9bcffe
- SHA512 6a444dbca2d81cf46c42312fa262a1e08638943d6cbdf5eef11834a9df9c619e75344d13471a1030623d31c660cd9b2d839e09d4d0fbfbebde7b67abc4ae19c7
- SSDEEP 6144:oZQbUe8Jgjx/LDsonC40xx2Ps4GjAzh7MZaGYun3YCpG:fgChsvP2Psz8iZaGzoC8
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
File Explorer
-
x.zip.zip .ps1 244KB
-
x.bat24B
-
x.dll.dll 387KB
x.bat
- SHA256 7ae33cf772296474b192ffa57970bb02d937582c5a40547e230ac2246ad5222f
- MD5 2b2ef25b695683a82fe6d92a2c3e8994
- SHA1 c3c9911c6a780735ca6fcb074659495bb60601f4
- SHA512 c557aa90f04a1729d101588044ec76c273036015cbc4d2a029bab803f8ad1c0397d92627127d926d36676086baee03dc5584af80222d13fe5bdcb2409586e4bf
- MD5 SHA1 SHA512
x.dll
- IMPHASH e406d311f6b10b8a1b598b66f1b0f5cb
- SHA256 f2f80e624a3bcaec31ecb73a8d75715189b7baa73176fa773a986ff80c19976d
- MD5 770453c5d3ed689a451d55e947764742
- SHA1 1971af01230229e08c15ff0810dcefa3e9a29ff4
- SHA512 1f8d5b9907e35801536316b5297df25c1e314f873b3115b62a22a57fdff850dcb035c685ddc6a06ef8c0071cbdf4a0310db624eeb0acbb1131c03aed28ee8f1f
- SSDEEP 6144:Ve+9dH7mdgjTTi96d7B9+stcTNWY76POE9F/nvaGYuidCHhhF0K:VeMdhjCYOTNWY76z/vaGL
- MD5 SHA1 SHA512 SSDEEP
Minor OS version
Major OS version
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
SetThreadPriority
CloseHandle
WaitForSingleObject
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateEventA
CreateSemaphoreA
SetEvent
ReleaseSemaphore
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime
RP8CheckSignature
RP8GetInfo
RP8LCheckSignature
RP8LGetInfo
RebPBlendAlpha
RebPCleanupTransparentArea
RebPConfigInitInternal
RebPDecode
RebPDecodeARGB
RebPDecodeARGBInto
RebPDecodeBGR
RebPDecodeBGRA
RebPDecodeBGRAInto
RebPDecodeBGRInto
RebPDecodeRGB
RebPDecodeRGBA
RebPDecodeRGBAInto
RebPDecodeRGBInto
RebPDecodeYUV
RebPDecodeYUVInto
RebPEncode
RebPEncodeBGR
RebPEncodeBGRA
RebPEncodeLosslessBGR
RebPEncodeLosslessBGRA
RebPEncodeLosslessRGB
RebPEncodeLosslessRGBA
RebPEncodeRGB
RebPEncodeRGBA
RebPFreeDecBuffer
RebPGetDecoderVersion
RebPGetEncoderVersion
RebPGetFeaturesInternal
RebPGetInfo
RebPIAppend
RebPIDecGetRGB
RebPIDecGetYUVA
RebPIDecode
RebPIDecodedArea
RebPIDelete
RebPINewDecoder
RebPINewRGB
RebPINewYUV
RebPINewYUVA
RebPIUpdate
RebPInitDecBufferInternal
RebPInitDecoderConfigInternal
RebPMemoryWrite
RebPMemoryWriterInit
RebPPictureARGBToYUVA
RebPPictureARGBToYUVADithered
RebPPictureAlloc
RebPPictureCopy
RebPPictureCrop
RebPPictureDistortion
RebPPictureFree
RebPPictureHasTransparency
RebPPictureImportBGR
RebPPictureImportBGRA
RebPPictureImportBGRX
RebPPictureImportRGB
RebPPictureImportRGBA
RebPPictureImportRGBX
RebPPictureInitInternal
RebPPictureIsView
RebPPictureRescale
RebPPictureView
RebPPictureYUVAToARGB
XL55
Name
.text
Size
237KB
Virtual Size
237KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
112KB
Virtual Size
108KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ