MalwareCollection-master.zip
- SHA256 c6a916c33096cd488ca57c28863c433cf5279128aa50ea156761bab6444f4937
Static task
static1
Behavioral task
behavioral1
Sample
Ransomware.7ev3n.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral2
Sample
Ransomware.BadRabbit.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral3
Sample
Ransomware.CoronaVirus.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral4
Sample
Ransomware.CryptoLocker.exe
Resource
win10v2004-20240221-en
Checks for missing Authenticode signature.
| resource |
|---|
| unpack002/Ransomware.7ev3n.exe |
| unpack006/Ransomware.CoronaVirus.exe |
| unpack008/Ransomware.CryptoLocker.exe |
Unsigned PE
Checks for missing Authenticode signature.
count=12, id=241, version=40116,
count=160, id=243, version=40116,
count=27, id=242, version=40116,
count=22, id=259, version=23013,
count=60, id=261, version=23013,
count=66, id=260, version=23013,
count=15, id=203, version=65501,
count=158, id=1, productName=Unmarked objects,
count=2, id=265, version=23026,
count=1, id=255, productName=VS2015 [14.0] build 23026, version=23026,
count=1, id=258, productName=VS2015 [14.0] build 23026, version=23026,
Sep 8, 2017
CN=Symantec Corporation,OU=STAR Security Engines,O=Symantec Corporation,L=Mountain View,ST=California,C=US
CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Sep 8, 2017
count=3, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=224, productName=VS2013 UPD5 build 40629, version=40629,
count=1, id=223, productName=VS2013 UPD5 build 40629, version=40629,
count=9, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=25, id=1, productName=Unmarked objects,
count=1, id=175, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
Unsigned PE
Checks for missing Authenticode signature.
count=31, id=241, version=40116,
count=149, id=243, version=40116,
count=30, id=242, version=40116,
count=4, id=261, version=27034,
count=29, id=259, version=24237,
count=41, id=261, version=24237,
count=18, id=260, version=24237,
count=38, id=260, version=27034,
count=37, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=301, id=1, productName=Unmarked objects,
count=4, id=265, version=24245,
count=1, id=255, version=24245,
count=1, id=151,
count=1, id=258, version=24245,
Unsigned PE
Checks for missing Authenticode signature.
count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=316, id=1, productName=Unmarked objects,
count=33, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=67, id=211, version=60610,
count=1, id=201, productName=VS2012 UPD3 build 60610, version=60610,
count=1, id=151,
count=1, id=204, productName=VS2012 UPD3 build 60610, version=60610,