final payload.zip
- SHA256 281a1f577bf84eb668df449fcaa41956247cfde8e769915058edbcd7066c95f9
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
shellcode.exe
Resource
win7-20240419-en
windows7-x64
3 signatures
300 seconds
General
- Target final payload.zip
- Size 755KB
- Sample240629-negf2szank
- SHA256 281a1f577bf84eb668df449fcaa41956247cfde8e769915058edbcd7066c95f9
- MD5 92a14c578998d0bf8f1192fcf6301b94
- SHA1 4c39c8995563c6089ecc9849186f60ec23a52b15
- SHA512 08caa5fedad698e5958464a718d601e1eefb26aec781cdd2e23b6d598c2e7858afe39141966404e1c2eb07ebcc653485a14eb20cd1d60f1ee6bfd34312170ef4
- SSDEEP 12288:YznjIwNwUvEf5X1v6b208odEK4KVHbVQntRgRJc++q02UMXFhokN56xQeU:YDj3Nwp5Fyvd/VJQntRs2+10G35wXU
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/shellcode.exe
File Explorer
-
final payload.zip.zip 755KB
-
acechfe.au31.2MB
-
shellcode.exe.exe 146KB
acechfe.au3
- SHA256 84aa8f55107cef4482da77d67c9de93cff2c0748c256a2cce232e9be3b63b608
- MD5 47c38940758d784906d14c721380ddbb
- SHA1 869ff58b83b9aecefb679f204c4b1ad298502be1
- SHA512 7333dad44be99555e47d53f2015dd55393a43772b91f513aa174c5147ff14125c76da2f08a26504002e377c9b9a32b02fb16cd35ad12ff9e7e86c4b97db0e101
- SSDEEP 24576:Xulfo0RG6+ij1LfSEJgMFwS/I5L3x21ZGtqk:+NXj1LfSEUB21Zfk
- MD5 SHA1 SHA512 SSDEEP
shellcode.exe
- IMPHASH 924d64d2d12390800b47570b95ef95cf
- SHA256 e12c720480be024f98d3a5ebb31445e16373da9bd7933fe4b9fa9ccd940e9c1d
- MD5 c3003964fbad244db448b96c95d57319
- SHA1 65026bbd3a65263e4da58c26e69c7576fd01d755
- SHA512 7baf0bec4678184940d0a93c990aa6390b6ff379833706d62d51cd087284e1bc34ff047f9332baf7824fc14a0cc00830b9e815d09c9016b8edbb714d1b6a035c
- SSDEEP 3072:pBy3MmqwKvAiu6p08+l1nBtHEcq3Wn2D8IX3lqrpyPM:ny3MxwKNmxrn0Wn2D8InlqrpkM
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
0
Major OS version
4
Entry point
4832
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FreeLibrary
GetCommandLineA
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
SetUnhandledExceptionFilter
TlsGetValue
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
msvcrt
_strdup
_stricoll
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_fpreset
_fullpath
_iob
_isctype
_onexit
_pctype
_setmode
abort
atexit
calloc
free
fwrite
malloc
mbstowcs
memcpy
perror
realloc
setlocale
signal
strcoll
strlen
tolower
vfprintf
wcstombs
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
106KB
Virtual Size
105KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
1024B
Virtual Size
736B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
/4
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
112B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
/14
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/29
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/41
Size
512B
Virtual Size
303B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/55
Size
512B
Virtual Size
456B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/67
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ