Windows XP Horror Edition (Peaceful).iso
- SHA256 600ebcfb2d116c1f92dc83ca36696d023380b1bee77546abbc1c2c00d801641b
Static task
static1
1 signatures
General
- Target Windows XP Horror Edition (Peaceful).iso
- Size 55.0MB
- Sample260913-q5clwsy1ft
- SHA256 600ebcfb2d116c1f92dc83ca36696d023380b1bee77546abbc1c2c00d801641b
- MD5 42676f51dda3778fc3091e3243ba8e8a
- SHA1 b1a593143c0f9407bea07f45638a60d40fa8c207
- SHA512 d90e6e08b0502d53097082db93ee232ca82858d8ea8ed3d341dfef38ab73bca96a63be3cb2187c5f76b523d1d696af87c1e630f7d921c3c86264b6c61f0a1013
- SSDEEP 1572864:kj6L5PLk/mBnyKOYl39GFpFEujFMm+B997DaNHN1oS72fnD9hRzZ01tO0DpvrvF6:A6dzV9GLFEujFMm+B997DaNHN1oS72fv
- TLSH T170C72253D003CA18E9850B328A82791B1A60B91CF96B561FFD5CFF45F27730D399A3A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/WinXP.Horror.Peacful.exe
File Explorer
-
Windows XP Horror Edition (Peaceful).iso.iso 55.0MB
-
out.iso.iso 55.0MB
-
WinXP.Horror.Peacful.exe.exe .js 54.9MB
out.iso
- SHA256 600ebcfb2d116c1f92dc83ca36696d023380b1bee77546abbc1c2c00d801641b
- MD5 42676f51dda3778fc3091e3243ba8e8a
- SHA1 b1a593143c0f9407bea07f45638a60d40fa8c207
- SHA512 d90e6e08b0502d53097082db93ee232ca82858d8ea8ed3d341dfef38ab73bca96a63be3cb2187c5f76b523d1d696af87c1e630f7d921c3c86264b6c61f0a1013
- SSDEEP 1572864:kj6L5PLk/mBnyKOYl39GFpFEujFMm+B997DaNHN1oS72fnD9hRzZ01tO0DpvrvF6:A6dzV9GLFEujFMm+B997DaNHN1oS72fv
- TLSH T170C72253D003CA18E9850B328A82791B1A60B91CF96B561FFD5CFF45F27730D399A3A9
- MD5 SHA1 SHA512 SSDEEP TLSH
WinXP.Horror.Peacful.exe
- SHA256 556444ff1fee8aa32d1418c409535909c3c0cb0adaa87488ca0c03ee3b5e8006
- MD5 b1940cff31a3a1f51d6eb4492657be9b
- SHA1 2562282b0538fb8647621b29435d19c757d7b309
- SHA512 81b6d263dfe65ccc702bcb85feee6c1f1c78c4a2cb62c3a52c6dd520511297d773fa4dca471132df1f1e3fd1a6fb00851ec4670c48df44572990553f54f4c77c
- SSDEEP 1572864:2j6L5PLk/mBnyKOYl39GFpFEujFMm+B997DaNHN1oS72fnD9hRzZ01tO0DpvrvF6:26dzV9GLFEujFMm+B997DaNHN1oS72fv
- TLSH T10CC72253D003CA18E9850B328A82791B1A60B91CF96B561FFD5CFF45F27730D399A3A9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
501180
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
486KB
Virtual Size
485KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
3KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
16B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
29KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
54.4MB
Virtual Size
54.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ