Overview
overview
3Static
static
3core.vbs
windows10-1703-x64
1core.vbs
windows10-1703-x64
1core.vbs
windows7-x64
1core.vbs
windows10-2004-x64
1core.vbs
windows11-21h2-x64
1boot/vmlinuz.exe
windows10-1703-x64
boot/vmlinuz.exe
windows10-1703-x64
boot/vmlinuz.exe
windows7-x64
boot/vmlinuz.exe
windows10-2004-x64
boot/vmlinuz.exe
windows11-21h2-x64
Static task
static1
Behavioral task
behavioral1
Sample
core.vbs
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
core.vbs
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
core.vbs
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
core.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
core.vbs
Resource
win11-20240802-en
Behavioral task
behavioral6
Sample
boot/vmlinuz.exe
Resource
win10-20240404-en
Behavioral task
behavioral7
Sample
boot/vmlinuz.exe
Resource
win10-20240404-en
Behavioral task
behavioral8
Sample
boot/vmlinuz.exe
Resource
win7-20240704-en
Behavioral task
behavioral9
Sample
boot/vmlinuz.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral10
Sample
boot/vmlinuz.exe
Resource
win11-20240802-en
General
-
Target
TinyCore-current.iso
-
Size
24.0MB
-
MD5
46e41fe234679972578adb0b1d59e8b1
-
SHA1
42489cdfda9666177cd9abc1876f4dea258f7ab8
-
SHA256
c1d8dbf7e93de0a9de256e9d3e77e7c1a4c8c07507bf60445904ad51cc12ca2a
-
SHA512
4aaa26526d9be22fdeede1a6caf1b5ac3df3ba41cb30917a722d382b5706ba5e642a933ea96b720d4836a19d02501245ffd09c4171e7d9b100575c1b2e75d60f
-
SSDEEP
393216:42AnUPNWHoObSW/goJTyR1rfwT4ZEwzhNqSAyp:4GNWHomSbaorfwkZEwzrqSAy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/boot/vmlinuz
Files
-
TinyCore-current.iso.iso
-
out.iso.iso
-
[BOOT]/Boot-NoEmul.img
-
boot/core.gz.gz
-
core.cpio.vbs
-
boot/isolinux/boot.cat
-
boot/isolinux/boot.msg
-
boot/isolinux/f1
-
boot/isolinux/f2
-
boot/isolinux/f3
-
boot/isolinux/f4
-
boot/isolinux/isolinux.bin
-
boot/isolinux/isolinux.cfg
-
boot/isolinux/menu.c32
-
boot/vmlinuz.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 5.2MB - Virtual size:
IMAGE_SCN_CNT_CODE
���� Size: 12.8MB - Virtual size:
Size: - Virtual size:
-
cde/copy2fs.lst
-
cde/onboot.lst
-
cde/optional/Xlibs.tcz
-
cde/optional/Xlibs.tcz.md5.txt
-
cde/optional/Xprogs.tcz
-
cde/optional/Xprogs.tcz.md5.txt
-
cde/optional/Xvesa.tcz
-
cde/optional/Xvesa.tcz.md5.txt
-
cde/optional/aterm.tcz
-
cde/optional/aterm.tcz.md5.txt
-
cde/optional/bzip2-lib.tcz
-
cde/optional/bzip2-lib.tcz.md5.txt
-
cde/optional/fltk-1.3.tcz
-
cde/optional/fltk-1.3.tcz.md5.txt
-
cde/optional/flwm.tcz
-
cde/optional/flwm.tcz.md5.txt
-
cde/optional/freetype.tcz
-
cde/optional/freetype.tcz.md5.txt
-
cde/optional/imlib2-bin.tcz
-
cde/optional/imlib2-bin.tcz.md5.txt
-
cde/optional/imlib2.tcz
-
cde/optional/imlib2.tcz.md5.txt
-
cde/optional/libICE.tcz
-
cde/optional/libICE.tcz.md5.txt
-
cde/optional/libSM.tcz
-
cde/optional/libSM.tcz.md5.txt
-
cde/optional/libX11.tcz
-
cde/optional/libX11.tcz.md5.txt
-
cde/optional/libXau.tcz
-
cde/optional/libXau.tcz.md5.txt
-
cde/optional/libXcursor.tcz
-
cde/optional/libXcursor.tcz.md5.txt
-
cde/optional/libXdmcp.tcz
-
cde/optional/libXdmcp.tcz.md5.txt
-
cde/optional/libXext.tcz
-
cde/optional/libXext.tcz.md5.txt
-
cde/optional/libXfixes.tcz
-
cde/optional/libXfixes.tcz.md5.txt
-
cde/optional/libXfont.tcz
-
cde/optional/libXfont.tcz.md5.txt
-
cde/optional/libXmu.tcz
-
cde/optional/libXmu.tcz.md5.txt
-
cde/optional/libXrender.tcz
-
cde/optional/libXrender.tcz.md5.txt
-
cde/optional/libXt.tcz
-
cde/optional/libXt.tcz.md5.txt
-
cde/optional/libfontenc.tcz
-
cde/optional/libfontenc.tcz.md5.txt
-
cde/optional/libjpeg-turbo.tcz
-
cde/optional/libjpeg-turbo.tcz.md5.txt
-
cde/optional/libpng.tcz
-
cde/optional/libpng.tcz.md5.txt
-
cde/optional/libxcb.tcz
-
cde/optional/libxcb.tcz.md5.txt
-
cde/optional/wbar.tcz
-
cde/optional/wbar.tcz.md5.txt
-
cde/xbase.lst