Static task
static1
Behavioral task
behavioral1
Sample
PantsOff/pantsoff.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
PantsOff/pantsoff.exe
Resource
win10v2004-20230221-en
General
-
Target
$R8WH6OH.zip
-
Size
555KB
-
MD5
a52d3ca96d1fecbadc0443d61b85a600
-
SHA1
0dc2a33b133c47d3bf7aee37e0bc000bfd975769
-
SHA256
3536307ca410354de7693397db65e9b5332d15ff33c6391f3bf26286f2060e74
-
SHA512
34dbba5ad43137ca99aa22938bcc54789a1ed26c80b02ae51ca44733951758949b99470dbe50c1d98c2fcc46413ca9526c050097bcb63b8e435e356123ca566d
-
SSDEEP
12288:+DG1GGcQKN9+ojEvtz+ARdpVtFm5ZTOamP0bLDmg0yZ:BGGcpN9HgFHnVtFouP0b3mFY
Malware Config
Signatures
Files
-
$R8WH6OH.zip.zip
Password: ow&b!54X6x_#4gT@9BT4
-
Device/HarddiskVolume3/$Recycle.Bin/S-1-5-21-355392704-576851691-196181176-1002/$R8WH6OH.zip.zip
Password: ow&b!54X6x_#4gT@9BT4
-
PantsOff/pantsoff.exe.exe windows x86
Password: ow&b!54X6x_#4gT@9BT4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
manifest.json