0x07.zip
- SHA256 99dcd7c066843b8f00661445467b4f0e2ee48444e36cf8a3e64bb227b06b7da7
Password
withnothing
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0x07.exe
Resource
win7-20240220-en
windows7-x64
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
0x07.exe
Resource
win10-20240221-en
windows10-1703-x64
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
0x07.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
11 signatures
150 seconds
Behavioral task
behavioral4
Sample
0x07.exe
Resource
win11-20240319-en
windows11-21h2-x64
10 signatures
150 seconds
General
- Target 0x07.zip
- Size 159KB
- Sample240329-28dh5scf23
- SHA256 99dcd7c066843b8f00661445467b4f0e2ee48444e36cf8a3e64bb227b06b7da7
- MD5 538ad11dfc1ddeb82f18d74ae66a683c
- SHA1 c9e767ad44d5852069da50dfa355ccef32b6b294
- SHA512 0abe0d6ce62d44cf177705c7cb3b813844f853ffc460629fcff55145080a53894151cd5dbb388cb997f923b149a42fb7123154957d64de59261127a7e281fdb3
- SSDEEP 3072:nWYRKspXrD0lCW9OpAPYinx3zZqnG3spHmdWN2HXJzJzdorOmqWAFo3GUe6aEY:nWYRKsd32CYOpORx3tF8pGd+23JdarJ6
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/0x07.exe
File Explorer
-
0x07.zip.zip 159KB
-
0x07.exe.exe 247KB
0x07.exe
- IMPHASH 60616d48898f60c598f751ddfa271d3d
- SHA256 52d6d769eb474d4138ac31e05634a6ca7a4ebef5920f8356c1cd70d9fa42c2fb
- MD5 733eb0ab951ae42a8d8cca413201e428
- SHA1 640ffb3ee44eb86afaea92e6c5aa158a5d4aafd1
- SHA512 c7cdf77aa881c5dbb2abf17913dbf645fe88e16fa11fa055392d36ccf936fc43050c48feb631e193fe044123a190f123d2d6ff12234c0ff7c8c7c6e290209d8f
- SSDEEP 3072:xaWEHnqlm+0FEaJSq6+ouCpk2mpcWJ0r+QNTBfZnazJ9k3kxMC+89+aPyXiwQ9M1:cWCMm8aMldk1cWQRNTBhz3Yz/qc9M1
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
withnothing
Minor OS version
1
Major OS version
5
Entry point
10371
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Users\Niko\Documents\Visual Studio 2013\Projects\0x07\Release\0x07.pdb
kernel32
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
OutputDebugStringW
LCMapStringW
HeapReAlloc
CloseHandle
LoadLibraryA
GetProcAddress
CreateFileW
GetConsoleWindow
WriteFile
Sleep
GetCurrentProcess
SetFilePointer
ExitProcess
GetCPInfo
GetOEMCP
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
GetCommandLineA
RaiseException
RtlUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
GetLastError
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
HeapSize
SetLastError
GetCurrentThreadId
HeapFree
HeapAlloc
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
GetModuleFileNameW
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
IsValidCodePage
GetACP
WriteConsoleW
user32
GetWindowRect
GetWindowDC
LoadIconA
DrawIcon
ExitWindowsEx
GetDC
MessageBoxA
SetCursorPos
ReleaseDC
GetDesktopWindow
BlockInput
GetCursorPos
ShowWindow
GetSystemMetrics
GetForegroundWindow
gdi32
LineTo
StretchBlt
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
advapi32
LookupPrivilegeValueA
OpenProcessToken
AdjustTokenPrivileges
shell32
ShellExecuteW
Name
.text
Size
52KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
168KB
Virtual Size
167KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=21, id=223, productName=VS2013 build 21005, version=21005,
count=40, id=225, productName=VS2013 build 21005, version=21005,
count=112, id=224, productName=VS2013 build 21005, version=21005,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=104, id=1, productName=Unmarked objects,
count=1, id=229, version=40629,
count=1, id=219, productName=VS2013 build 21005, version=21005,
count=1, id=151,
count=1, id=222, productName=VS2013 UPD5 build 40629, version=40629,