General

  • Target

    138a5c0013ea013787c01d93dca0e1301ebee262ce8cb36db1eab72f4ca2020e

  • Size

    3.5MB

  • MD5

    008a8787a9bc2326d95c0afbc3afa7e4

  • SHA1

    ccf5f1fb04a7b159c96fe5e3faef2de9a73072eb

  • SHA256

    138a5c0013ea013787c01d93dca0e1301ebee262ce8cb36db1eab72f4ca2020e

  • SHA512

    deb4e3a60bb4689d67469010d0a5fde5a08b31aaadd956c3dff2120660d4fbd16e58c125bf7413f87e01d4567cda651774aec81ad8bcec4d9eb0302e21f8e2d6

  • SSDEEP

    49152:PaMtwMPPGqvuMIPVntwqvuMIPVIlVKdnv6Avv3x7MDefNUAX+b5ZqvuMIPVh:PNPPIdt9IdQk9v3x7MDWNfu6Idh

Score
3/10

Malware Config

Signatures

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • 138a5c0013ea013787c01d93dca0e1301ebee262ce8cb36db1eab72f4ca2020e
    .zip
  • Xp_Shutdown/INSTRUCTIONS.txt
  • Xp_Shutdown/XP_Force_Shutdown.exe
    .exe windows:5 windows x64 arch:x64

    2004a5f6f543f8c26e144c1ceb66f943


    Headers

    Imports

    Sections

  • Xp_Shutdown/XP_Logoff.exe
    .exe windows:5 windows x64 arch:x64

    2004a5f6f543f8c26e144c1ceb66f943


    Headers

    Imports

    Sections

  • Xp_Shutdown/XP_Settings.exe
    .exe windows:5 windows x64 arch:x64

    2004a5f6f543f8c26e144c1ceb66f943


    Headers

    Imports

    Sections

  • Xp_Shutdown/XP_Shutdown.exe
    .exe windows:5 windows x64 arch:x64

    2004a5f6f543f8c26e144c1ceb66f943


    Headers

    Imports

    Sections

  • Xp_Shutdown/ahk/XP_Force_Shutdown.ahk
  • Xp_Shutdown/ahk/XP_Logoff.ahk
  • Xp_Shutdown/ahk/XP_Settings.ahk
  • Xp_Shutdown/ahk/XP_Shutdown.ahk
  • Xp_Shutdown/images/0.3.png
    .png
  • Xp_Shutdown/images/0.4.png
    .png
  • Xp_Shutdown/images/0.5.png
    .png
  • Xp_Shutdown/images/0.6.png
    .png
  • Xp_Shutdown/images/0.7.png
    .png
  • Xp_Shutdown/images/0.8.png
    .png
  • Xp_Shutdown/images/0.9.png
    .png
  • Xp_Shutdown/images/1.4.png
    .png
  • Xp_Shutdown/images/1.5.png
    .png
  • Xp_Shutdown/images/1.png
    .png
  • Xp_Shutdown/images/2.png
    .png
  • Xp_Shutdown/images/3.1.png
    .png
  • Xp_Shutdown/images/3.png
    .png
  • Xp_Shutdown/images/4.png
    .png
  • Xp_Shutdown/images/5.png
    .png
  • Xp_Shutdown/images/6.png
    .png
  • Xp_Shutdown/images/Bitmap14356.bmp
  • Xp_Shutdown/images/Bitmap20141.png
    .png
  • Xp_Shutdown/images/Bitmap20142.jpg
    .jpg
  • Xp_Shutdown/images/Bitmap20142updates.jpg
    .jpg
  • Xp_Shutdown/images/Bitmap20150.bmp
  • Xp_Shutdown/images/Cursor_1.cur
  • Xp_Shutdown/images/Cursor_15.cur
  • Xp_Shutdown/images/LogOff.bmp
  • Xp_Shutdown/images/LogOffDown.bmp
  • Xp_Shutdown/images/LogOffHover.bmp
  • Xp_Shutdown/images/Restart.bmp
  • Xp_Shutdown/images/RestartDown.bmp
  • Xp_Shutdown/images/RestartHover.bmp
  • Xp_Shutdown/images/ShutdownUpdates.png
    .png
  • Xp_Shutdown/images/StandBy.bmp
  • Xp_Shutdown/images/StandByDown.bmp
  • Xp_Shutdown/images/StandByHover.bmp
  • Xp_Shutdown/images/SwitchUser.bmp
  • Xp_Shutdown/images/SwitchUserDown.bmp
  • Xp_Shutdown/images/SwitchUserHover.bmp
  • Xp_Shutdown/images/TurnOff.bmp
  • Xp_Shutdown/images/TurnOffDown.bmp
  • Xp_Shutdown/images/TurnOffHover.bmp
  • Xp_Shutdown/images/XP_Logoff.ico
  • Xp_Shutdown/images/XP_Settings.ico
  • Xp_Shutdown/images/XP_ShutDown.ico
  • Xp_Shutdown/menu pics/menu.jpg
    .jpg
  • Xp_Shutdown/menu pics/menu2.jpg
    .jpg
  • Xp_Shutdown/menu pics/menu3.jpg
    .jpg
  • Xp_Shutdown/menu pics/thumb.jpg
    .jpg
  • Xp_Shutdown/misc/Klingon.ttf
  • Xp_Shutdown/misc/LatestVersion.txt
  • Xp_Shutdown/misc/XP timings.txt
  • Xp_Shutdown/misc/XpTahoma.ttf
  • Xp_Shutdown/misc/ba-ding.wav
  • Xp_Shutdown/misc/click.wav
  • Xp_Shutdown/misc/ding.wav
  • Xp_Shutdown/misc/fade.ahk
  • Xp_Shutdown/misc/fade.exe
    .exe windows:5 windows x64 arch:x64

    2004a5f6f543f8c26e144c1ceb66f943


    Headers

    Imports

    Sections

  • Xp_Shutdown/misc/functions.ahk
  • Xp_Shutdown/misc/info.txt
  • Xp_Shutdown/misc/options.ini
  • Xp_Shutdown/misc/pop.wav