09_7d44bd7d83dace54b68f93ef16b7a70173dc9ccf

General

Target
09_7d44bd7d83dace54b68f93ef16b7a70173dc9ccf
Size 180KB
Sample240320-mft8vsed92
SHA256 b37533b42dd24cc7efb7b1c4c71a70dac1a70623026e6c49dc50857b9e1f585c
MD5 5888013d8ed73ad7f59d11d8a191390f
SHA1 4c6dff0f5ec5e20c6831de4764b2998e33be19cc
SHA512 83abafb5bf4cbc061a30bfa69dcaffc84f81a86f71446d5af989bd42585ad6d4d39ec279f43d41e7275e4557cd383f93be86f2d13fcf9e1287cae8470c4c2fbf
SSDEEP 3072:c64PPeGgoWGtkTieoEAhFgS1yrN4XbmF4pT0bzQ7rYDBppR+2OWH5xMoiW2oyI1i:c64PWjokTieTwgAyryXbO4FIErYK2OW4
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Device/HarddiskVolume7/imaginaryC2-master/examples/use-case-9-zloader/zloader-imaginary-c2/server_data/09_7d44bd7d83dace54b68f93ef16b7a70173dc9ccf

File Explorer

09_7d44bd7d83dace54b68f93ef16b7a70173dc9ccf

.zip 180KB
Device/HarddiskVolume7/imaginaryC2-master/examples/use-case-9-zloader/zloader-imaginary-c2/server_data/09_7d44bd7d83dace54b68f93ef16b7a70173dc9ccf

.dll 838KB
manifest.json

336B

09_7d44bd7d83dace54b68f93ef16b7a70173dc9ccf

SHA256 b37533b42dd24cc7efb7b1c4c71a70dac1a70623026e6c49dc50857b9e1f585c
MD5 5888013d8ed73ad7f59d11d8a191390f
SHA1 4c6dff0f5ec5e20c6831de4764b2998e33be19cc
SHA512 83abafb5bf4cbc061a30bfa69dcaffc84f81a86f71446d5af989bd42585ad6d4d39ec279f43d41e7275e4557cd383f93be86f2d13fcf9e1287cae8470c4c2fbf
SSDEEP 3072:c64PPeGgoWGtkTieoEAhFgS1yrN4XbmF4pT0bzQ7rYDBppR+2OWH5xMoiW2oyI1i:c64PWjokTieTwgAyryXbO4FIErYK2OW4
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Password

India@2023@@

Device/HarddiskVolume7/imaginaryC2-master/examples/use-case-9-zloader/zloader-imaginary-c2/server_data/09_7d44bd7d83dace54b68f93ef16b7a70173dc9ccf

SHA256 d0226de456f5fb75ae7588d57bb9368848aa01afae86893d6da2b95098080c97
MD5 57138593c18492f813e426719ebed2e8
SHA1 7d44bd7d83dace54b68f93ef16b7a70173dc9ccf
SHA512 57097f8dea1681713ebe983f2e1829ea21536c1bb867865b65ce8497fca67ca89ae148f0a77bdd9c5622b60b29344a83bfea9b09cbf388336c764840b5e32daa
SSDEEP 6144:oxG3wZYnmy+9Mw6PeJ/Oubatb6pf4Pbjmr9UnbNzLLxsw:NwZYn72hSS9gbNzLLOw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

India@2023@@

Minor OS version

0

Major OS version

4

Entry point

5389

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

294KB

Virtual Size

294KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

11KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.jtpa

Size

4KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.scej

Size

4KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tlxc

Size

484KB

Virtual Size

484KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

09_7d44bd7d83dace54b68f93ef16b7a70173dc9ccf

Device/HarddiskVolume7/imaginaryC2-master/examples/use-case-9-zloader/zloader-imaginary-c2/server_data/09_7d44bd7d83dace54b68f93ef16b7a70173dc9ccf

generic

manifest.json