AntivirusDefender8.0-main.zip
- SHA256 1ee3788918d34886873b12b45d7723e64eebe81cd117dbbf95f75fb99b38ea2d
Overview
overview
3Static
static
3AntivirusD...in.zip
windows11-21h2-x64
1AntivirusD...ibutes
windows11-21h2-x64
3AntivirusD....0.lnk
windows11-21h2-x64
3AntivirusD...ICENSE
windows11-21h2-x64
1AntivirusD...DME.md
windows11-21h2-x64
3AntivirusD...ST.exe
windows11-21h2-x64
1AntivirusD...fw.dll
windows11-21h2-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AntivirusDefender8.0-main.zip
Resource
win11-20240704-en
windows11-21h2-x64
0 signatures
600 seconds
Behavioral task
behavioral2
Sample
AntivirusDefender8.0-main/.gitattributes
Resource
win11-20240704-en
windows11-21h2-x64
9 signatures
600 seconds
Behavioral task
behavioral3
Sample
AntivirusDefender8.0-main/AntivirusDefender8.0.lnk
Resource
win11-20240704-en
windows11-21h2-x64
2 signatures
600 seconds
Behavioral task
behavioral4
Sample
AntivirusDefender8.0-main/LICENSE
Resource
win11-20240704-en
windows11-21h2-x64
0 signatures
600 seconds
Behavioral task
behavioral5
Sample
AntivirusDefender8.0-main/README.md
Resource
win11-20240508-en
windows11-21h2-x64
3 signatures
600 seconds
Behavioral task
behavioral6
Sample
AntivirusDefender8.0-main/RUNTHISFIRST.exe
Resource
win11-20240704-en
windows11-21h2-x64
1 signatures
600 seconds
Behavioral task
behavioral7
Sample
AntivirusDefender8.0-main/bootmgfw.dll
Resource
win11-20240704-en
windows11-21h2-x64
0 signatures
600 seconds
General
- Target AntivirusDefender8.0-main.zip
- Size 34KB
- Sample240708-m359msxhrf
- SHA256 1ee3788918d34886873b12b45d7723e64eebe81cd117dbbf95f75fb99b38ea2d
- MD5 5c90630ffc59f7c9177238825bd053b5
- SHA1 1169dcec468c24a74e774405e570dc6c4916825e
- SHA512 0ef1e0c24ca9001a30476eaa640ef3b36890af790e6a45d92fcae42436f80bc5039000c0e37101632e8cb890e4faef8de34cd3541e38e9c1527d812c3a357162
- SSDEEP 768:QDbFz8pPHib6SEJWNsjj45uY9FZ4nPl1SItgKb:QVwviSljj4VJOOapb
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/AntivirusDefender8.0-main/RUNTHISFIRST.exe unpack001/AntivirusDefender8.0-main/bootmgfw.efi
File Explorer
-
AntivirusDefender8.0-main.zip.zip 34KB
-
AntivirusDefender8.0-main/.gitattributes66B
-
AntivirusDefender8.0-main/AntivirusDefender8.0.lnk.lnk 1KB
-
AntivirusDefender8.0-main/LICENSE17KB
-
AntivirusDefender8.0-main/README.md75B
-
AntivirusDefender8.0-main/RUNTHISFIRST.exe.exe 9KB
-
AntivirusDefender8.0-main/bootmgfw.efi.dll 47KB
AntivirusDefender8.0-main/.gitattributes
- SHA256 1a1dbe176bc233b499d35a57db7513f2941c99ab9759f177830c9149be99005b
- MD5 05bdb783ee6514c8c072e47680af8ff7
- SHA1 ba3dfe345280bdcc5e817bb02cf49b8b8d8e1c4c
- SHA512 9e820d6126d62c0b89e380c69685f6668b2f131283f57e524f59492fa6df22844dda1b90d244d4a1f8aea78a84e65d47b1a878168c4e41001459a947ef275ffe
- MD5 SHA1 SHA512
AntivirusDefender8.0-main/AntivirusDefender8.0.lnk
- SHA256 da6227b4b97a7b3de4abdf570873eedf44192180eb142bfabf91916fefefb41a
- MD5 3da7e181e7e2a7cb91b92cdaf0300c5b
- SHA1 8d9691891d52d9ae7acbce140e49653d7225e5cd
- SHA512 cca8d154c6764a44914368af05259e35bf60dbc9b09b3842564521ecd99c9023b091113d9adebe7a868f2b96ef3542570bb3b2fca1bff35a15c27b837ad00296
- MD5 SHA1 SHA512
AntivirusDefender8.0-main/LICENSE
- SHA256 b90ed8150a6d371c84b7dbaa680cd0e9893ef7c2558765e1e00930513efcfe3b
- MD5 9450224a11928f85794c948d3539a882
- SHA1 5a8ac7817844ee170a3c90c3db11a8421c4b7bca
- SHA512 6c628be3fa80568200c2d1979349d16ea5575d7017c2d41f71f29703e65452b00d0d0033bf87a3e4d3ef23d28b80b31a082c0c98110ec56a647bde3ce3c269a7
- SSDEEP 384:QhUwi5rpL676yV12rPd34ZomzM2FR+dWF7jUI:QmFWixMFzMdm7jUI
- MD5 SHA1 SHA512 SSDEEP
AntivirusDefender8.0-main/README.md
- SHA256 64565cbcfba9ae621d79b758bc2b6bb737a000cdb8d36aaa716d6b24c6b4e1e9
- MD5 1ef2449c0655d9c8f7335d5f4e18a1f0
- SHA1 be20ac57040d58c08125f5268286af8cc031f30e
- SHA512 ad4b7fa705d3dbefee5a5ab004eeb172b2248290d6a6cd06443ebe9536cbb6d51d3eb6955edb81f04f8aa96f2c252a3626e555c860f9edaa85c1f72916096ad0
- MD5 SHA1 SHA512
AntivirusDefender8.0-main/RUNTHISFIRST.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 cc3657cd6f186055334ccd88f8aac5457265a03b31274517d763fe32003b65ca
- MD5 1a7514c839000a811e123d97d818c1e9
- SHA1 925b53693ef965b68c797eb5c995de539f0e0288
- SHA512 15c101b2160b8cc9c0f94e6e9e0442598cb16b21b9b69cad48f3f0741e16885d3ddb4b2deafb4739c0ca1db4345f1f45ceae9dad08f21daafc38a8e99f3c4f91
- SSDEEP 96:xuF96Fu+DPL/Ej5tjCRIf/cGAPVEVB8lvQ53WNtaYc0PkMZOjlNSr0Pk1YHAd4sD:x+UTEjyU2PVEVmC584YcekMiur0M1Y4
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11858
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\victim\source\repos\RUNTHISFIRST\RUNTHISFIRST\obj\Debug\RUNTHISFIRST.pdb
mscoree
_CorExeMain
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
AntivirusDefender8.0-main/bootmgfw.efi
- SHA256 02fb366914d19a3623786516bf9cee1d99cd66d4580aca097ce59b6b4defc49b
- MD5 626cd80262165a208d825222a64a9dc7
- SHA1 ef7bbd9b69b26e90cbd04bf3fa30d448a74818d0
- SHA512 f940566b2a211b123b6f9b24af88a5fb6bfb2cc2bedd5304493561f5a712e4459b29755b2e5e018c4b6043abb3027882575ebeac936c4bda3755e137419bdd85
- SSDEEP 768:Cv70zZLzitCoVYJwGiUPHdYj2RXW7dfIhFWYIQ:C7ENeUoVYJLiUPH/RXW7RI9
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
25360
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_EFI_APPLICATION
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
AbsolutePointerProtocol
AcpiTableGuid
AcquireLock
AdapterDebugProtocol
AllocatePool
AllocateZeroPool
AppendDevicePath
AppendDevicePathInstance
AppendDevicePathNode
AsciiPrint
AsciiVSPrint
Atoi
BCDtoDecimal
BS
CRCTable
CalculateCrc
CatPrint
CheckCrc
CheckCrcAltSize
CloseSimpleReadFile
CompareGuid
CompareMem
CopyMem
DbgAssert
DbgPrint
DecimaltoBCD
DevPathTable
DevicePathFromHandle
DevicePathInstance
DevicePathInstanceCount
DevicePathSize
DevicePathToStr
DivU64x32
DumpHex
DuplicateDevicePath
EFIDebug
EFIDebugVariable
EfiDtbTableGuid
EfiPartTypeLegacyMbrGuid
EfiPartTypeSystemPartitionGuid
EndDevicePath
EndInstanceDevicePath
ErrorCodeTable
ErrorOutSpliterProtocol
Exit
FileDevicePath
FloatToString
FreePool
GetShellArgcArgv
GrowBuffer
GuidList
GuidToString
Hex
IInput
IPrint
IPrintAt
InitializeGlobalIoDevice
InitializeGuid
InitializeLib
InitializeLibPlatform
InitializeLock
InitializeUnicodeSupport
Input
InternalShellProtocol
Ip4Protocol
Ip4ServiceBindingProtocol
IsLocalPrint
IsValidAscii
IsValidEfiCntlChar
LShiftU64
LegacyBootProtocol
LibCreateProtocolNotifyEvent
LibDeleteVariable
LibDevicePathToInterface
LibDuplicateDevicePathInstance
LibFileInfo
LibFileSystemInfo
LibFileSystemVolumeLabelInfo
LibFwInstance
LibGetSmbiosString
LibGetSmbiosSystemGuidAndSerialNumber
LibGetSystemConfigurationTable
LibGetUiString
LibGetVariable
LibGetVariableAndSize
LibImageHandle
LibInitialized
LibInsertToTailOfBootOrder
LibInstallProtocolInterfaces
LibIsValidTextGraphics
LibLocateHandle
LibLocateHandleByDiskSignature
LibLocateProtocol
LibMatchDevicePaths
LibMemoryMap
LibOpenRoot
LibReinstallProtocolInterfaces
LibRuntimeDebugOut
LibRuntimeRaiseTPL
LibRuntimeRestoreTPL
LibSetNVVariable
LibSetVariable
LibStubMetaiMatch
LibStubStrLwrUpr
LibStubStriCmp
LibStubUnicodeInterface
LibUninstallProtocolInterfaces
MetaMatch
MetaiMatch
MpsTableGuid
MultU64x32
NullGuid
OpenSimpleReadFile
Output
PFLUSH
PGETC
PITEM
PPUTC
PSETATTR
PoolAllocationType
PoolPrint
Print
PrintAt
RShiftU64
RT
ReadPciConfig
ReadPort
ReadSimpleReadFile
ReallocatePool
ReleaseLock
RootDevicePath
RtAcquireLock
RtBCDtoDecimal
RtCompareGuid
RtCompareMem
RtConvertList
RtCopyMem
RtDecimaltoBCD
RtLibEnableVirtualMappings
RtReleaseLock
RtSetMem
RtStpCpy
RtStpnCpy
RtStrCat
RtStrCmp
RtStrCpy
RtStrLen
RtStrSize
RtStrnCat
RtStrnCpy
RtStrnLen
RtZeroMem
SMBIOS3TableGuid
SMBIOSTableGuid
ST
SalSystemTableGuid
SetCrc
SetCrcAltSize
SetMem
ShellDynamicCommandProtocolGuid
ShellParametersProtocolGuid
ShellProtocolGuid
SimplePointerProtocol
SimpleTextInputExProtocol
StatusToString
StpCpy
StpnCpy
StrCat
StrCmp
StrCpy
StrDuplicate
StrLen
StrLwr
StrSize
StrUpr
StriCmp
StrnCat
StrnCmp
StrnCpy
StrnLen
Tcp4Protocol
Tcp4ServiceBindingProtocol
TextInSpliterProtocol
TextOutSpliterProtocol
TimeToString
Udp4Protocol
Udp4ServiceBindingProtocol
UnicodeInterface
UnicodeSPrint
UnicodeToPcAnsiOrAscii
UnicodeVSPrint
UnknownDevice
UnpackDevicePath
VPoolPrint
VPrint
ValidMBR
ValueToHex
ValueToString
VariableStoreProtocol
VgaClassProtocol
WaitForEventWithTimeout
WaitForSingleEvent
WritePciConfig
WritePort
ZeroMem
_DbgOut
_IPrint
_PoolCatPrint
_PoolPrint
_Print
_SPrint
efi_call0
efi_call1
efi_call10
efi_call2
efi_call3
efi_call4
efi_call5
efi_call6
efi_call7
efi_call8
efi_call9
efi_main
gEFiUiInterfaceProtocolGuid
gEfiBlockIo2ProtocolGuid
gEfiBlockIoProtocolGuid
gEfiBusSpecificDriverOverrideProtocolGuid
gEfiComponentName2ProtocolGuid
gEfiComponentNameProtocolGuid
gEfiDebugImageInfoTableGuid
gEfiDebugSupportProtocolGuid
gEfiDeviceIoProtocolGuid
gEfiDevicePathFromTextProtocolGuid
gEfiDevicePathProtocolGuid
gEfiDevicePathToTextProtocolGuid
gEfiDevicePathUtilitiesProtocolGuid
gEfiDiskIo2ProtocolGuid
gEfiDiskIoProtocolGuid
gEfiDriverBindingProtocolGuid
gEfiDriverFamilyOverrideProtocolGuid
gEfiEbcProtocolGuid
gEfiEdidActiveProtocolGuid
gEfiEdidDiscoveredProtocolGuid
gEfiEdidOverrideProtocolGuid
gEfiFileInfoGuid
gEfiFileSystemInfoGuid
gEfiFileSystemVolumeLabelInfoIdGuid
gEfiGlobalVariableGuid
gEfiGraphicsOutputProtocolGuid
gEfiHashProtocolGuid
gEfiLoadFileProtocolGuid
gEfiLoadedImageProtocolGuid
gEfiNetworkInterfaceIdentifierProtocolGuid
gEfiPcAnsiGuid
gEfiPciIoProtocolGuid
gEfiPciRootBridgeIoProtocolGuid
gEfiPlatformDriverOverrideProtocolGuid
gEfiPxeBaseCodeCallbackProtocolGuid
gEfiPxeBaseCodeProtocolGuid
gEfiSerialIoProtocolGuid
gEfiSimpleFileSystemProtocolGuid
gEfiSimpleNetworkProtocolGuid
gEfiSimpleTextInProtocolGuid
gEfiSimpleTextOutProtocolGuid
gEfiUnicodeCollationProtocolGuid
gEfiVT100Guid
gEfiVT100PlusGuid
gEfiVTUTF8Guid
longjmp
memcpy
memset
setjmp
strcmpa
strlena
strncmpa
xtoi
Name
.text
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
396B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ