0b64671581f1f8be974fdea937942df072341dc17f146fa96f0c75b802c8ed5a
- SHA256 0b64671581f1f8be974fdea937942df072341dc17f146fa96f0c75b802c8ed5a
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Loader.exe
Resource
win7-20240221-en
windows7-x64
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
Loader.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
12 signatures
150 seconds
Behavioral task
behavioral3
Sample
opengl32.dll
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
opengl32.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
0 signatures
150 seconds
General
- Target 0b64671581f1f8be974fdea937942df072341dc17f146fa96f0c75b802c8ed5a
- Size 22.1MB
- Sample240404-pm2ydsfb3y
- SHA256 0b64671581f1f8be974fdea937942df072341dc17f146fa96f0c75b802c8ed5a
- MD5 84b7497c47ff672260fc77e5120b8f62
- SHA1 9c9feaec39f89530b10fccccefef716a7d077338
- SHA512 2565ac3d2c316d705cd0c31ad0094dc256a603f5376742a43d433290a9401ec48545c0225f20fd413d9c49849270307274898f0521113e9b3a8a40d1d2452a57
- SSDEEP 393216:W6tDL7P6EJ5kgaaDOPrbodNQLzTOxTgiLB1qhE9wn11a6ABbL+OjPFjqN0/Ltjam:WkLblJPaaiHovQPaohE9219O5xTDtjw+
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Loader.exe
File Explorer
-
0b64671581f1f8be974fdea937942df072341dc17f146fa96f0c75b802c8ed5a.zip 22.1MB
-
Loader.exe.exe 69.9MB
-
opengl32.dll546KB
-
Почему нет иконки файла.txt226B
Loader.exe
- IMPHASH f0ea7b7844bbc5bfa9bb32efdcea957c
- SHA256 558be4bca2165d9e1335330cfacc0ff3c175ed21dfe17c7421b3b1bae6348a6a
- MD5 0e3f59387c131274d399813d1d95d80c
- SHA1 f09cce4678a762cfe87dbc5c8b68f9a951afebb2
- SHA512 fc04a75b47d0780212971e7a1db91df5f4d98ed796379bea053fb2c2578b3de42a6da561ce1579479f6f5088a06ff32d6945ac5fe112a5ca236f5453c60e54e1
- SSDEEP 393216:S0tsUElbLI3r6B6Xlek/Kez3sFumIYUDfLFokwsWtjGHx:SEIHIjlek/KY4bIYU7/wsfx
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
430624
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
WriteFile
WriteConsoleW
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetUnhandledExceptionFilter
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
ResumeThread
PostQueuedCompletionStatus
LoadLibraryA
LoadLibraryW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetEnvironmentStringsW
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateFileA
CreateEventA
CloseHandle
AddVectoredExceptionHandler
Name
.text
Size
22.1MB
Virtual Size
22.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
27.8MB
Virtual Size
27.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1.0MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
/4
Size
512B
Virtual Size
295B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
1.8MB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/32
Size
646KB
Virtual Size
645KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/46
Size
512B
Virtual Size
48B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/65
Size
5.2MB
Virtual Size
5.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/78
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/90
Size
497KB
Virtual Size
497KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
220KB
Virtual Size
220KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
8.7MB
Virtual Size
8.7MB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
opengl32.dll
- SHA256 c12b92c7069755538b3a0383ef8f296c0313470190b73385008abf519e0ce8f6
- MD5 9795ea8a41f5017adf924489d8c4e43c
- SHA1 1d830d37d23833c264b60841a506d18a61dbba44
- SHA512 dd885a4ddf777d09c4449cb11a73ebddfde49d33fbaf8274eb9cc426fcf82ee1a0fb174b86c9925b14c2fd494690441e3dde76c84a9d2652881c267217bc33a3
- SSDEEP 24:mHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHw:n
- MD5 SHA1 SHA512 SSDEEP
Почему нет иконки файла.txt
- SHA256 ca1a4cf33747a084932d572bbccec1f14584aff66ea4e883c98103fdac716c10
- MD5 21ee21d00764cbb4a4da18d9db332d30
- SHA1 f5b5e10f1fbcc4ddee66a45a22efde24641db878
- SHA512 1368f34f9fb36f5700bd8a133a52b800d0d735b4f37ff851882bc7058e80a2094f128ae7b8cf51b3aba0edbfe9878c06c395254e40d2afc7d0e98cc4915439bb
- MD5 SHA1 SHA512