Static task
static1
General
-
Target
UNBAN_.rar
-
Size
8.8MB
-
MD5
794027c04bc63722f853b89ce6160643
-
SHA1
195d1ef22b03bb0c76607975c1a1a87f20a8dadf
-
SHA256
4025448c24092eeea850078f0623e0adf3ac047550c6f3435ae849bd83a9916d
-
SHA512
e18395ba04f94ea7cd66255e229df3e99edd3e70fa7c28a709c813b815c9a07b3a58808381281674b67ffc584828d6a2bbf7d6a37acff21dba5fdb94622d4191
-
SSDEEP
196608:Tm93yifBMCcgJ+k/bHGQonJgveHc2SepAIaK90BKdjP6s5h:ipy1/gv/bfoqv8cneHlyBaL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/UNBAN .exe
Files
-
UNBAN_.rar.rar
-
Clear Unban .bat
-
Fix Error And Restart Pc/22h2fix.bat
-
Fix Error And Restart Pc/3.reg
-
Fix Error And Restart Pc/ALLFIX.bat
-
Fix Error And Restart Pc/BSOD_FIX.bat
-
Fix Error And Restart Pc/How to use.txt
-
Fix Error And Restart Pc/VulnerableDriverFix.bat
-
Fix Error And Restart Pc/fix_error.bat
-
Key.txt
-
UNBAN .exe.exe windows:6 windows x64 arch:x64
0f63c87ae93bc2676e88a088d9fa54dd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
HeapFree
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
SetWindowLongW
advapi32
CryptEncrypt
ole32
CoCreateInstance
oleaut32
SysFreeString
msvcp140
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
urlmon
URLDownloadToFileW
userenv
UnloadUserProfile
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_exception_destroy
api-ms-win-crt-runtime-l1-1-0
exit
api-ms-win-crt-stdio-l1-1-0
_fseeki64
api-ms-win-crt-heap-l1-1-0
_callnewh
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-math-l1-1-0
_dsign
api-ms-win-crt-string-l1-1-0
strncpy
api-ms-win-crt-convert-l1-1-0
strtod
api-ms-win-crt-filesystem-l1-1-0
_fstat64
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-environment-l1-1-0
_dupenv_s
ws2_32
getsockname
crypt32
CertEnumCertificatesInStore
wldap32
ord33
normaliz
IdnToAscii
Sections
.text Size: - Virtual size: 769KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 6.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.0;8 Size: - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vY# Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.2=< Size: 9.0MB - Virtual size: 9.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ