Static task
static1
Behavioral task
behavioral1
Sample
SketchfabRipper.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
SketchfabRipper.exe
Resource
win10v2004-20240508-en
General
-
Target
SketchfabRipper.exe
-
Size
1.9MB
-
MD5
53785d02a7f8ac91cff78dc368a730ac
-
SHA1
a77d6bdf31e0c5beef3cf07d7465f7d2ef406424
-
SHA256
c1f80cf94e6981b03b1f5b9562da9626dbbe7c1aaf2bcd68e3cee26f791a1eaf
-
SHA512
2e1bbd4e6f41c682c52919a594f154fa9eee4ba9cb1ec1b7e6373abebbee6304c1bc161b04bb268587cd8a1bb23b8111ea0b8f1d5df2f2241b5448cbb8293bc4
-
SSDEEP
49152:yzD5kKJmNVJsq4+prBySSkRDvItmKsSJQJXCV6LnTs:PKE2q4+prBXSaDvXJPY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SketchfabRipper.exe
Files
-
SketchfabRipper.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 574KB - Virtual size: 574KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ