8caa0ded0016274e7aa9026b2e40bcca.bin
- SHA256 e4e05ac9e585bf3a553afeec2bc170d53d7287b5919c0d932e3b6379625fcacb
Password
infected
Static task
static1
Behavioral task
behavioral1
Sample
d7bdc7f97c39999818f3320ee042c1d92e4024daabd3428cb75f0468e899c065.exe
Resource
win7-20240611-en
windows7-x64
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
d7bdc7f97c39999818f3320ee042c1d92e4024daabd3428cb75f0468e899c065.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
7 signatures
150 seconds
General
- Target 8caa0ded0016274e7aa9026b2e40bcca.bin
- Size 611KB
- Sample240613-b8l76stdnj
- SHA256 e4e05ac9e585bf3a553afeec2bc170d53d7287b5919c0d932e3b6379625fcacb
- MD5 9fc83b40d01c9a5a9eb9b08aad2c77a0
- SHA1 0a2affcfb47529866ece95cc699a695bfe2fe56d
- SHA512 6b32ff58abd4a8cb3573e31f63d5e590ac8ec332504f0640065a675de8f502f75be4d14a90e74ad3a664d0f915a0421c4b696e0cad9c5969fc202ce711825315
- SSDEEP 12288:sgb6VvK/K0d+cHe1lfV9L2Ghu7weuq8EzG16YbwkwsnXc:DbAS0cHe1lfV92Qe4qGkywHsM
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
File Explorer
-
8caa0ded0016274e7aa9026b2e40bcca.bin.zip 611KB
-
d7bdc7f97c39999818f3320ee042c1d92e4024daabd3428cb75f0468e899c065.exe.exe 625KB
-
Oppignerate/Befrdendes65.txt386B
-
Oppignerate/dyreavlens.imp1.1MB
-
Oppignerate/intarsiate.mek1.1MB
-
Oppignerate/laris.apo1.2MB
-
Photocopying.nul52KB
-
biologiklasses.Ans298KB
d7bdc7f97c39999818f3320ee042c1d92e4024daabd3428cb75f0468e899c065.exe
- IMPHASH 4ea4df5d94204fc550be1874e1b77ea7
- SHA256 d7bdc7f97c39999818f3320ee042c1d92e4024daabd3428cb75f0468e899c065
- MD5 8caa0ded0016274e7aa9026b2e40bcca
- SHA1 c3545f9d89af4df9ee9f36bb9edc7b7447864bcb
- SHA512 c4a47f72fc5546693b68fd1baabe66bb51b00938388d95bfe314bb427d2606a53abb5462a277c595e87ff42b6fdb478c88fb8c33b064ee1bf6c3eec811a6cf17
- SSDEEP 12288:ygSt3r2Fx+ivLcstd7DtNGV0ZjLXq26ZVzEWh7SBKJXvMJPhZzoJbE7:uhrox+ivg85DtN+0wVzE8uzoJbE7
- MD5 SHA1 SHA512 SSDEEP
Password
infected
PE Signature issue
Digest
e2:4a:44:ab:a0:1f:59:05:6c:83:1d:fc:e1:f0:61:f0:e7:6d:7d:7d:ee:7a:fd:bd:09:54:95:ba:e5:cc:ce:99
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Skaalpundet,OU=Shibboleters Tremmekalve\ ,O=Skaalpundet,L=Les Chapelles,ST=Auvergne-Rhône-Alpes,C=FR,1.2.840.113549.1.9.1=#0c2547656f6368726f6e6f6c6f676963616c6c79406e61706874686f7175696e6f6e652e546f70
Chains
Jun 12, 2024
Subject
CN=Skaalpundet,OU=Shibboleters Tremmekalve\ ,O=Skaalpundet,L=Les Chapelles,ST=Auvergne-Rhône-Alpes,C=FR,1.2.840.113549.1.9.1=#0c2547656f6368726f6e6f6c6f676963616c6c79406e61706874686f7175696e6f6e652e546f70
Serial Number
7f:5f:40:5b:f7:5a:97:41:c8:24:ce:d8:c1:ce:0d:24:97:7c:c8:b1
Issuer
CN=Skaalpundet,OU=Shibboleters Tremmekalve\ ,O=Skaalpundet,L=Les Chapelles,ST=Auvergne-Rhône-Alpes,C=FR,1.2.840.113549.1.9.1=#0c2547656f6368726f6e6f6c6f676963616c6c79406e61706874686f7175696e6f6e652e546f70
Timespan
Jun 1, 2024 - Jun 1, 2027
Minor OS version
0
Major OS version
4
Entry point
13238
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
SetCurrentDirectoryW
GetFileAttributesW
GetFullPathNameW
Sleep
GetTickCount
CreateFileW
GetFileSize
MoveFileW
SetFileAttributesW
GetModuleFileNameW
CopyFileW
ExitProcess
SetEnvironmentVariableW
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
GetVersion
SetErrorMode
WaitForSingleObject
GetCurrentProcess
CompareFileTime
GlobalUnlock
GlobalLock
CreateThread
GetLastError
CreateDirectoryW
CreateProcessW
RemoveDirectoryW
lstrcmpiA
GetTempFileNameW
WriteFile
lstrcpyA
lstrcpyW
MoveFileExW
lstrcatW
GetSystemDirectoryW
GetProcAddress
GetModuleHandleA
GlobalFree
GlobalAlloc
GetShortPathNameW
SearchPathW
lstrcmpiW
SetFileTime
CloseHandle
ExpandEnvironmentStringsW
lstrcmpW
GetDiskFreeSpaceW
lstrlenW
lstrcpynW
GetExitCodeProcess
FindFirstFileW
FindNextFileW
DeleteFileW
SetFilePointer
ReadFile
FindClose
MulDiv
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
GetPrivateProfileStringW
WritePrivateProfileStringW
FreeLibrary
LoadLibraryExW
GetModuleHandleW
user32
GetSystemMenu
SetClassLongW
IsWindowEnabled
EnableMenuItem
SetWindowPos
GetSysColor
GetWindowLongW
SetCursor
LoadCursorW
CheckDlgButton
GetMessagePos
LoadBitmapW
CallWindowProcW
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
wsprintfW
ScreenToClient
GetWindowRect
GetSystemMetrics
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharPrevW
CharNextA
wsprintfA
DispatchMessageW
PeekMessageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
EndDialog
RegisterClassW
SystemParametersInfoW
CreateWindowExW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
LoadImageW
SetTimer
SetWindowTextW
PostQuitMessage
ShowWindow
GetDlgItem
IsWindow
SetWindowLongW
FindWindowExW
TrackPopupMenu
AppendMenuW
CreatePopupMenu
DrawTextW
EndPaint
CreateDialogParamW
SendMessageTimeoutW
SetForegroundWindow
gdi32
SelectObject
SetBkMode
CreateFontIndirectW
SetTextColor
DeleteObject
GetDeviceCaps
CreateBrushIndirect
SetBkColor
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
advapi32
RegDeleteKeyW
SetFileSecurityW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegOpenKeyExW
RegEnumValueW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumKeyW
comctl32
ImageList_AddMasked
ord17
ImageList_Destroy
ImageList_Create
ole32
OleUninitialize
OleInitialize
CoTaskMemFree
CoCreateInstance
Name
.text
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
128KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
188KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=166, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Oppignerate/Befrdendes65.txt
- SHA256 0cf4bb0bf1c3e0ae6482e23e1848afc714e8b954dc992eb19ef679348f02b84e
- MD5 ccde3fc943fdcfb029d3525cce095db3
- SHA1 547dad168a0cc862946085dc455be414451d5c53
- SHA512 cee02406bc4be98b6a1842e0f9964ef5586b0fa0946e91e545d293b48cf4e6b3163ff79ae7fc67c94fcaf6eab9314d2eafbd2f95fdc3cdb8a86364ee5ad01ca6
- MD5 SHA1 SHA512
Oppignerate/dyreavlens.imp
- SHA256 731be3247d08d24adc88d60d8f22282d6588c054ed4cc40029699ea6fc052565
- MD5 58adb7cdd32ec55687f843af63111ed7
- SHA1 79183f55bc66b64b11ca4145a16bd82d436c9bfb
- SHA512 f5700c8b59da855c768c66f573bd354bde40aaf771cb8fc7299be892aed1031775cf5bd117b1739b3e9e983a24f48732e7fe28feecbcc6e2db42026b63eb63bf
- SSDEEP 768:PPscZpdvpcCsBLRbV/UN5pA4j/SKVijdD4rcYmRjnwoL4YGpazYNU+QDDPumTcCF:7keMUS0Eunf7kTFiOLWtM
- MD5 SHA1 SHA512 SSDEEP
Oppignerate/intarsiate.mek
- SHA256 5559dd25f25927ea495b4a4e5cc1f297fc5e97a090c1b668a5cd9755a8f00273
- MD5 01e1f30356c56ab894e00f810155ccc9
- SHA1 0035fdcc37357f1e34045ac3387b7584477750ea
- SHA512 5954e94b3698e290cc69f6dc111fb57e5a54b3c417dce29997b0388c5344c88978891362e20e143401573f46cce6d561c6c4cdbaab20105f5ddaa5bb80089cba
- SSDEEP 768:TbtEww/5Xa3ILTP3xcxDDQEspiRC0T1coB5xS+ySp6tqMoTjOc26YxugGM78IV0R:AhERl2P1ZQQtPUzKA/
- MD5 SHA1 SHA512 SSDEEP
Oppignerate/laris.apo
- SHA256 48316282ea994f9d92a13e908068e620539f6937c5cdd7bfb849e996bf3fea62
- MD5 4082ae64bc3139c761d5902ac0c0eaf3
- SHA1 76027d38b21873c9da8c0762432d3c8c9ccd754e
- SHA512 51ba31623b87c9c541576adc4ac9684553a6b8d06f2a84c2f2608d6f1050403920a4f96b9a9cf6bb0808bf307dd825e290f3dc7c382b7082367a7054cb5f204c
- SSDEEP 768:Pe2bKzwzel5Awqpqs2Rf5MOGmZ8LJzD8pCz8Lml4Rj1zKaNtmI38NAxZ22AeVfR2:/c+opySNYtMGq8zCd
- MD5 SHA1 SHA512 SSDEEP
Photocopying.nul
- SHA256 0880e9f1478dbfb835c99a99344fb9944a2b3d51d79a1002273e7b4ae371a8dd
- MD5 c72c8dd60de0cdf1a386643215daa30b
- SHA1 1cf1836acc5356b3301f0b382c0fff905b4e98eb
- SHA512 5e6a4af2cf827e66e17cbf7b121b266fc254916574abdd7e0e490a1bebe4225b8ce4baccdc6a0bfe82dc6870a477dab2485f4a9e7f77191962482b01a70ee2c9
- SSDEEP 1536:qJfMqVwt1cF7iBGxQAc6xrf2tn7BF+oSX:ofMEu105ren7yos
- MD5 SHA1 SHA512 SSDEEP
biologiklasses.Ans
- SHA256 04cebb97743f9b9a0d72bdf90cedf1334ebbcb90f77c3ab339fa58083b4cd5dc
- MD5 71bc262fe4b1b02453c2afc78b046b5e
- SHA1 5dfc52c52c19c6d9ad0deaa0e48a8fb5ed601d8c
- SHA512 ae3c982dcd5a2f2e39ac039fd7459374ba0b12628ea445df2decdb52ea30c64ba3d17ded48ab7902a404ca983185ae60f1836ba50731744289ee4682be6f2409
- SSDEEP 6144:x64p2iGtC/T3G0ppeKpJzthhD36Pl7w0t/VOTVxZmsdBxN+Q58:xX0tC/TW0pMKdX36N7OTBmiBxN/+
- MD5 SHA1 SHA512 SSDEEP