Behavioral task
behavioral1
Sample
Test.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Test.exe
Resource
win10v2004-20230220-en
General
-
Target
Ransomware.Win32.Crypt360.zip
-
Size
550KB
-
MD5
acb6b05000e9d999f24fb96d1420fa5e
-
SHA1
c5c3c0019ef82987ac9e136957cc2d2e405f9272
-
SHA256
f4d054949f5c075827e9e9d1ad82231adc9f0af9e64637927e967ffddf1116cc
-
SHA512
1467122e938c5ab26e8379f047ec5decf8ba23b11c6c19f2570dea469ee9f03287423ea44636051a32bf7cb561ffdbd8c8ac5cc79b2a6d854aa08efdec7f946a
-
SSDEEP
12288:ZDepED/3KBa+KZviesWSAL2jJl3Ey5QWSOUeKIp8dV2zsb:ZDepU/6YBZleY2tl3sIpGV2zg
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Test upx
Files
-
Ransomware.Win32.Crypt360.zip.zip
Password: infected
-
Test.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 558KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 247KB - Virtual size: 247KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 35KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ