APP.exe.zip
- SHA256 b70b9039ec4b33987a991c5c20729eb3310d7406b8d15161037df3b21fd968bb
Password
infected
Resubmissions
29/02/2024, 21:22
240229-z717psch4z23/03/2023, 01:23
230323-bsajfacf5426/10/2021, 12:58
211026-p7hegshea423/10/2021, 13:49
211023-q4pj3acda6927/09/2021, 16:25
210927-tw86aahecn1027/09/2021, 16:15
210927-tp7c4shebk1027/09/2021, 16:01
210927-tgfv7ahdfp25/09/2021, 21:37
210925-1glj1adhh7924/09/2021, 00:57
210924-bbd6asfdgj1024/09/2021, 00:56
210924-bad4xafdfr9General
- Target APP.exe.zip
- Size 5.2MB
- Sample230323-bsajfacf54
- SHA256 b70b9039ec4b33987a991c5c20729eb3310d7406b8d15161037df3b21fd968bb
- MD5 4f3669edb010f5db21b13a088182b8fe
- SHA1 892447e55ff7a3ac5d26c573bb8eb4607b41ba1e
- SHA512 a6c1911bd010c13630b9921fefbfd5a495ed3786e347c208602f25bd9e8f49be28d6711a971bd74f87f303bd312862fea730483045fd4b74410c76e9fbe59ea7
- SSDEEP 98304:Bhv3bUVAm0jX/b1U4Qa+i62ypDH7JRoNU1SAcp6sOZQVArlMV:vbUmTQa+i6lpDHVR+CS6/QVClMV
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
-
resource yara_rule static1/unpack001/APP.exe themida
File Explorer
-
APP.exe.zip.zip 5.2MB
-
APP.exe.exe 5.2MB
APP.exe
- SHA256 72cb50e5791e1fcb11d24bc4cff3b44379a529c5549fbf6f500adcd67bfe9139
- MD5 a0b4d2c96937104bcffd21ce69885a59
- SHA1 6cda6e2bee6d67a5f407e4d7e96af9d76bfa7c79
- SHA512 17b1b4de1bddb7f357744ace07509481e80eb8a63fa9c39ee00ecd7eba3b03611eb0e2329e88e20b05e8a2655fa67a7b699c8455c1fa9aebeba4384151ae2ee0
- SSDEEP 98304:QY40yFZlFla+f7L2HycG7jiOmgwrKx3ieuoN3yL5p8wZe7+su8kZhCPp:QY40yFZlTn9lmglso4s7+suOPp
- MD5 SHA1 SHA512 SSDEEP
Password
infected
Minor OS version
Major OS version
Entry point
8839256
Magic Number
523
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
_cgo_dummy_export
Name
Size
388KB
Virtual Size
917KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
Size
49KB
Virtual Size
115KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
381KB
Virtual Size
943KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
512B
Virtual Size
804B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
512B
Virtual Size
644B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
368KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
512B
Virtual Size
78B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
512B
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
13KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.edata
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.themida
Size
Virtual Size
6.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.boot
Size
4.4MB
Virtual Size
4.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
16B
Virtual Size
4KB
Characteristics
IMAGE_SCN_MEM_READ