WerpInitiateCrashReporting
Overview
overview
7Static
static
3459dc6aeff...d72.7z
windows7-x64
3459dc6aeff...d72.7z
windows10-2004-x64
7459dc6aeff...d72.7z
ubuntu-18.04-amd64
459dc6aeff...d72.7z
debian-9-armhf
459dc6aeff...d72.7z
debian-9-mips
459dc6aeff...d72.7z
debian-9-mipsel
459dc6aeff...72.dll
windows7-x64
1459dc6aeff...72.dll
windows10-2004-x64
1459dc6aeff...72.dll
ubuntu-18.04-amd64
459dc6aeff...72.dll
debian-9-armhf
459dc6aeff...72.dll
debian-9-mips
459dc6aeff...72.dll
debian-9-mipsel
Static task
static1
Behavioral task
behavioral1
Sample
459dc6aeffb60a7ca353a525e5f90a03eedb7d52cac387f54723024be6371d72.7z
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
459dc6aeffb60a7ca353a525e5f90a03eedb7d52cac387f54723024be6371d72.7z
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
459dc6aeffb60a7ca353a525e5f90a03eedb7d52cac387f54723024be6371d72.7z
Resource
ubuntu1804-amd64-20240226-en
Behavioral task
behavioral4
Sample
459dc6aeffb60a7ca353a525e5f90a03eedb7d52cac387f54723024be6371d72.7z
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral5
Sample
459dc6aeffb60a7ca353a525e5f90a03eedb7d52cac387f54723024be6371d72.7z
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral6
Sample
459dc6aeffb60a7ca353a525e5f90a03eedb7d52cac387f54723024be6371d72.7z
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral7
Sample
459dc6aeffb60a7ca353a525e5f90a03eedb7d52cac387f54723024be6371d72.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
459dc6aeffb60a7ca353a525e5f90a03eedb7d52cac387f54723024be6371d72.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
459dc6aeffb60a7ca353a525e5f90a03eedb7d52cac387f54723024be6371d72.dll
Resource
ubuntu1804-amd64-20240226-en
Behavioral task
behavioral10
Sample
459dc6aeffb60a7ca353a525e5f90a03eedb7d52cac387f54723024be6371d72.dll
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral11
Sample
459dc6aeffb60a7ca353a525e5f90a03eedb7d52cac387f54723024be6371d72.dll
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral12
Sample
459dc6aeffb60a7ca353a525e5f90a03eedb7d52cac387f54723024be6371d72.dll
Resource
debian9-mipsel-20240226-en
General
-
Target
459dc6aeffb60a7ca353a525e5f90a03eedb7d52cac387f54723024be6371d72.7z
-
Size
5.4MB
-
MD5
a3964dae393fa17cb70d21fa4add67d1
-
SHA1
15c440a449e3a19f0aae5de0759716e3d71b9e63
-
SHA256
97546039e6ad5e7e2cd8b55f94c399d3a11cda743d5af602451edcd38fd19e85
-
SHA512
04cc4cfc432b39f3f1a4ff3c6c8ac48e1fbc2a3e4db4e5ebefdb643d2e92bbb0b9ea90ec5a8f0060733097c1c4aa7af183af35726b0a966500aae0eb110aaa54
-
SSDEEP
98304:683CasJ/ahuyYtYRJL3K4XnGw2CrdEhB3B7hDUN/1a1Fegrye7okVblV:6ECast4xYajLRXz9qB3B7No/wFllxVbn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/459dc6aeffb60a7ca353a525e5f90a03eedb7d52cac387f54723024be6371d72
Files
-
459dc6aeffb60a7ca353a525e5f90a03eedb7d52cac387f54723024be6371d72.7z.7z
Password: infected
-
459dc6aeffb60a7ca353a525e5f90a03eedb7d52cac387f54723024be6371d72.dll windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 90B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE