General
-
Target
Windows_7_ACTIVATION.zip
-
Size
1.7MB
-
MD5
518458d2198a0bf1d89e0f8b128890f0
-
SHA1
0161144088a410e758d2ebc28bd91662b78adc2b
-
SHA256
e248206e2605e7472824f51e8195d1e709a4dbf375098a2b725e533ba94dabd8
-
SHA512
5df04e3ab5a99c7625b6c902126c02fdae38543bc62bfe5d750a5764c8d8f1815a8e726ca28b5e716b76090425638e3f20ecf8441ea47e1363379060aa52d2f2
-
SSDEEP
24576:YJRnm7placo6SiG+PHdxo5R1XnKCKZYI+XA5TDMSI7C67TQehTtntt8wZcvjXr6u:OlIm+xoj1XKZt+Q5BSC67TDRt9Zc7eu
Malware Config
Signatures
-
Processes:
resource yara_rule static1/unpack001/Windows 7 Activation.exe upx
Files
-
Windows_7_ACTIVATION.zip.zip
-
Windows 7 Activation READ ME.txt
-
Windows 7 Activation.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 577KB - Virtual size: 580KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Windows 7 Activation.ini