myguy_petrwrap.zip
- SHA256 b3ba0aab790f43ffb57f3de9f84042ed0cfe78ae99c846a4c55587e9f1eed71e
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
myguy_petrwrap.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
11 signatures
60 seconds
General
- Target myguy_petrwrap.zip
- Size 161KB
- Sample261104-3y76faet3w
- SHA256 b3ba0aab790f43ffb57f3de9f84042ed0cfe78ae99c846a4c55587e9f1eed71e
- MD5 6f47612c82984c26afeabe671a5c5820
- SHA1 a3912135cabc798a4cf6bec6ec094e657b00b7cd
- SHA512 d3137a385309b5e28ff52152eb7bfefd6e41c0659f2b74d58a096364018f2e7da49ea2ff8047f66a028c8fcc0f9f1339c24a9c05b98bcb10946075284b8b0473
- SSDEEP 3072:MkqQJQrrB4Sue+TIw+JkDaVnzwSp45qOCEtCy2AwAkPG1:JqQsiSuXt+dMSp45qOCEYGN
- TLSH T1F6F3120D684A044A9F087D4093624AF2AF385919A8377FBC6CEF5598F3DB44FCE8A741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/myguy_petrwrap
File Explorer
-
myguy_petrwrap.zip.zip 161KB
-
myguy_petrwrap.exe 269KB
myguy_petrwrap
- IMPHASH ec7f48d0a7e4eb9d813d996817fbbdf3
- SHA256 17dacedb6f0379a65160d73c0ae3aa1f03465ae75cb6ae754c7dcb3017af1fbd
- MD5 a1d5895f85751dfe67d19cccb51b051a
- SHA1 9288fb8e96d419586fc8c595dd95353d48e8a060
- SHA512 a8f8a709882b77d90f188d172358356f42e2d5d2644bf45ab2b4c446cea8cbbc41e9203e854a9e6863aba23a14ba153fbbf9dc801a766221251d309214dad8de
- SSDEEP 3072:vOAZ69/F3xyBPn6UhTBNK8UbCk155CqC/S0KHBq0crpGR4+y92fTX6JNsJoPy:vOJ/FhgJhd9fk1PC/lbrpGR09e6JNsk
- TLSH T11244058120D929F1FAB3EBF14C1E817C0E55F647A2A19FC9768414E58BF72728EAC315
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
1
Major OS version
5
Entry point
5395
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
SetProcessAffinityMask
GetProcessIoCounters
GetModuleHandleW
GetTickCount
GetSystemWow64DirectoryW
GetProcessHandleCount
TerminateProcess
GetFileSizeEx
GetProcAddress
GetAtomNameA
GetModuleFileNameA
GetCurrentProcessId
GetThreadTimes
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
HeapReAlloc
GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
HeapDestroy
EncodePointer
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
GetCurrentThread
QueryPerformanceCounter
GetSystemTimeAsFileTime
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryW
GetLocaleInfoW
UnhandledExceptionFilter
IsDebuggerPresent
GetCurrentProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapFree
Sleep
RtlUnwind
HeapSize
RaiseException
IsValidLocale
user32
SetPropW
ShowScrollBar
LoadImageA
LoadImageW
msimg32
AlphaBlend
Name
.text
Size
77KB
Virtual Size
77KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
18KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
168KB
Virtual Size
168KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=21, id=171, productName=VS2010 build 30319, version=30319,
count=23, id=158, productName=VS2010 build 30319, version=30319,
count=85, id=170, productName=VS2010 build 30319, version=30319,
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=79, id=1, productName=Unmarked objects,
count=1, id=175, version=30319,
count=1, id=154, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,