malware.7z
- SHA256 5747e9cd2cabeea85ad02e83ec4124c4461a20065d3a631340c155b2e4c8b121
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Project2.exe
Resource
win7-20240708-en
windows7-x64
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
Project2.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
15 signatures
150 seconds
General
- Target malware.7z
- Size 260KB
- Sample240805-mq534stenm
- SHA256 5747e9cd2cabeea85ad02e83ec4124c4461a20065d3a631340c155b2e4c8b121
- MD5 653bccb88e8d955100c50f878f04eea9
- SHA1 1d6caa2d84fa0b51d6ce7d15f98f92c442e3a4cf
- SHA512 bc4dcb5050c0a808fd7f7246d9b57dbbfc8022023b0ff1a15106ec5f7cdaaa28b2a479d39b4c1df35013c6c6dd4db4a7ef3054b75f99e3ad1254fe1906bd9751
- SSDEEP 6144:XiyJNIv3zg+6Z1mzfxtofl6cKpV3G6Ohgv282mD/+0TubcHlaX:TAKzAf/aKpV38hgRr+6uClY
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Project2.exe
File Explorer
-
malware.7z.7z 260KB
-
Project2.exe.exe 12KB
-
shellcode2.bin303KB
Project2.exe
- IMPHASH 10d6b1e8d27f0a097be842220709b875
- SHA256 29c12e35c1942362bdb1e41cc45e65f51ec5f40a0b84c1406b56addf24d814bc
- MD5 2e098fe6d840861abc61a0b542a0069b
- SHA1 e4dd6bb202abb8defa8688fd122e979311a80a0b
- SHA512 46323dbfacb5e67012300b207d8143bdc227f679c37104feefa91e62845457683d63de2de3457359b701e3f919289ef66af1293c8d5c2e9a65312f626f5f3ab2
- SSDEEP 96:QQJsYdT/L3YhpwbmTt7YJ/zUce6rsPX0zjQqeZ8CjRdGLj7jPrmFxe3Q5tfcsDJu:QYdTzI3OUe3SkjQxe3Q5tfFDA+Z2
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
5360
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
E:\My Project\Project1\x64\Release\Project1.pdb
kernel32
VirtualAlloc
GetLastError
CreateFileA
CloseHandle
ReadFileEx
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetModuleHandleW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
RtlCaptureContext
vcruntime140
__C_specific_handler
__current_exception
__current_exception_context
memset
memcpy
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vfprintf
__stdio_common_vfwprintf
__acrt_iob_func
__p__commode
_set_fmode
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
_register_onexit_function
_crt_atexit
terminate
_seh_filter_exe
_set_app_type
_c_exit
_register_thread_local_exe_atexit_callback
__p___argc
_cexit
_exit
exit
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
__p___argv
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
512B
Virtual Size
432B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
44B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=30034,
count=18, id=261, version=30034,
count=10, id=260, version=30034,
count=4, id=259, version=30034,
count=3, id=257, version=27412,
count=56, id=1, productName=Unmarked objects,
count=1, id=265, version=30154,
count=1, id=255, version=30154,
count=1, id=258, version=30154,
shellcode2.bin
- SHA256 d7510023cf541f66855787825dfdacd2848925b3f754f040e64a46f9c4c4e8f5
- MD5 9dced52877e18582ed69b81a638fbddc
- SHA1 af48f7473a4fad86500259bbd85cf6427b51376f
- SHA512 d7c1541d9d392d092a2339bc1a9d67a793805febe216fef9d99d5153356b9555a3eaa14a359299fba26237a554034fe0d1d3464b612ca5240c27cff0e7015538
- SSDEEP 6144:xsOKgVkSyMmLUv5OUNlPJf4/5oca5qCWoIcvjxQ0:xCXMfxOUNlS5Y5LWoI2K0
- MD5 SHA1 SHA512 SSDEEP