C:\Users\adren\source\repos\zenneware\zenneware\obj\Debug\zenneware.pdb
Overview
overview
3Static
static
3zenneware/Form1.vbs
windows7-x64
1zenneware/Form1.vbs
windows10-2004-x64
1zenneware/...er.vbs
windows7-x64
1zenneware/...er.vbs
windows10-2004-x64
1zenneware/...es.vbs
windows7-x64
1zenneware/...es.vbs
windows10-2004-x64
1zenneware/...re.exe
windows7-x64
3zenneware/...re.exe
windows10-2004-x64
3zenneware/...re.exe
windows7-x64
3zenneware/...re.exe
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
zenneware/Form1.vbs
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
zenneware/Form1.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
zenneware/Properties/Resources.Designer.vbs
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
zenneware/Properties/Resources.Designer.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
zenneware/Properties/Resources.vbs
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
zenneware/Properties/Resources.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
zenneware/bin/Debug/zenneware.exe
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
zenneware/bin/Debug/zenneware.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
zenneware/obj/Debug/zenneware.exe
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
zenneware/obj/Debug/zenneware.exe
Resource
win10v2004-20240802-en
General
-
Target
zenne ware.zip
-
Size
52KB
-
MD5
ba4e9fefb542366aee06691b74b3f815
-
SHA1
ed6358c99fe5b9ca70999663b6dcf475a12e6c1a
-
SHA256
3cadfca416597e88bd1f53cdcf61495cd2da3a7e00df51c1c00235ea4e4c40e1
-
SHA512
99650623dbe87967a23f44b13c4b6affa34108aa68ebdcddcc678a552cb84e0e8b1bc4a583d9605b31b3f70f6c19553d70171e7b83d034992bea1690b653f7dc
-
SSDEEP
1536:dkW5lm+kN/hrtPeWPrAq9fyQPPeW6rAq9f6uUv:dkWXm5ZrtPecfyoPebf6t
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/zenneware/bin/Debug/zenneware.exe unpack001/zenneware/obj/Debug/zenneware.exe
Files
-
zenne ware.zip.zip
-
.vs/zenneware/FileContentIndex/cdad58e8-fc78-4112-b877-bc2f218b2281.vsidx
-
.vs/zenneware/FileContentIndex/d6a3b426-bd05-411d-b74d-c0d422ea259a.vsidx
-
.vs/zenneware/v17/.suo
-
zenneware.sln
-
zenneware/App.config
-
zenneware/Form1.Designer.cs
-
zenneware/Form1.cs
-
zenneware/Form1.resx.vbs
-
zenneware/Program.cs
-
zenneware/Properties/AssemblyInfo.cs
-
zenneware/Properties/Resources.Designer.cs.vbs
-
zenneware/Properties/Resources.resx.vbs
-
zenneware/Properties/Settings.Designer.cs
-
zenneware/Properties/Settings.settings
-
zenneware/bin/Debug/zenneware.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
zenneware/bin/Debug/zenneware.exe.config
-
zenneware/bin/Debug/zenneware.pdb
-
zenneware/obj/Debug/.NETFramework,Version=v4.8.AssemblyAttributes.cs
-
zenneware/obj/Debug/DesignTimeResolveAssemblyReferences.cache
-
zenneware/obj/Debug/DesignTimeResolveAssemblyReferencesInput.cache
-
zenneware/obj/Debug/zenneware.Form1.resources
-
zenneware/obj/Debug/zenneware.Properties.Resources.resources
-
zenneware/obj/Debug/zenneware.csproj.AssemblyReference.cache
-
zenneware/obj/Debug/zenneware.csproj.CoreCompileInputs.cache
-
zenneware/obj/Debug/zenneware.csproj.FileListAbsolute.txt
-
zenneware/obj/Debug/zenneware.csproj.GenerateResource.cache
-
zenneware/obj/Debug/zenneware.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\Users\adren\source\repos\zenneware\zenneware\obj\Debug\zenneware.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
zenneware/obj/Debug/zenneware.pdb
-
zenneware/zenneware.csproj