42ffa469f1e561ffe9f3692e7597ae01.zip
- SHA256 75a02f10024c9590966bac7b29558f12280d0d2a3fc38b8b1fd972f4c162fb0c
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
483aea1a285779f49a95ae0504138fd55471a7513c7d839f3874997681cff0bd.exe
Resource
win7-20240704-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
483aea1a285779f49a95ae0504138fd55471a7513c7d839f3874997681cff0bd.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
9 signatures
150 seconds
General
- Target 42ffa469f1e561ffe9f3692e7597ae01.zip
- Size 39KB
- Sample240831-lpzz2axdpc
- SHA256 75a02f10024c9590966bac7b29558f12280d0d2a3fc38b8b1fd972f4c162fb0c
- MD5 4e04bd9d159e843e712deed4f9149e25
- SHA1 531087f8a5e6bc0ec70f4d560bb0171b3d9f5218
- SHA512 7a4941c246b9ca663c5870eec9d024d3bc1d7bf413a1a3b915e7a8c3713e12d067e04d16f556b753ff0a6dba5a089bbb7eeb02be49f349f7b6f0361b61267b18
- SSDEEP 768:VdP54mBzVsyz8/6ra2yeuAv61IJKUgTNQnxL9PRiAJLfqxxMlX4+udKqepsc328k:14m52SvrTyeu+nKUgTNO9Pqx4X4+ieGB
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/483aea1a285779f49a95ae0504138fd55471a7513c7d839f3874997681cff0bd
File Explorer
-
42ffa469f1e561ffe9f3692e7597ae01.zip.zip 39KB
-
483aea1a285779f49a95ae0504138fd55471a7513c7d839f3874997681cff0bd.exe 88KB
483aea1a285779f49a95ae0504138fd55471a7513c7d839f3874997681cff0bd
- IMPHASH d0f156be95b89ada5813326f915d62a1
- SHA256 483aea1a285779f49a95ae0504138fd55471a7513c7d839f3874997681cff0bd
- MD5 42ffa469f1e561ffe9f3692e7597ae01
- SHA1 74914e574178df543f1bfe0abae25485d7279731
- SHA512 32482df140c96c37eec5d53028bbf216797afc6d408d91ec2bd2b2ba219377407cfc80cc928dc246314b1fad112b295d52b99c0ee3e9f31b4a821d8c3e9043d6
- SSDEEP 1536:05nfmIpxDWbUfd3aOPmxxEhvgCooXqRQqjh+rmKVsN:05fvp12UFKcD/6jwqWsN
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
0
Major OS version
4
Entry point
23520
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
AddAtomW
FreeConsole
GetCurrencyFormatW
IsProcessorFeaturePresent
CreateEventA
OpenFileMappingW
LocalHandle
HeapSize
MulDiv
WriteFile
GetTempFileNameW
SetLocaleInfoW
DosDateTimeToFileTime
EnumLanguageGroupLocalesW
CreatePipe
GetPrivateProfileSectionNamesA
SetConsoleTitleA
CancelDeviceWakeupRequest
GetVolumePathNameA
GetProfileIntA
GetDateFormatA
DebugBreak
SuspendThread
SetCommMask
EnumUILanguagesW
MoveFileWithProgressA
BackupRead
GetNumberOfConsoleInputEvents
GetLongPathNameA
FreeLibrary
GetFileAttributesW
EnumDateFormatsA
QueryDosDeviceA
UpdateResourceW
WritePrivateProfileStructA
lstrcpynA
GetExitCodeProcess
GlobalAddAtomW
GetShortPathNameW
UnlockFileEx
SetComputerNameExA
CancelDeviceWakeupRequest
gdi32
GetDeviceCaps
ole32
OleCreateFromData
HWND_UserMarshal
CreateAntiMoniker
CoInitialize
CoSetProxyBlanket
CoDisconnectObject
ReleaseStgMedium
HGLOBAL_UserSize
PropStgNameToFmtId
msvcrt
iswprint
_wgetenv
srand
strtok
iswupper
tolower
fputs
_swab
wcsncpy
_fputchar
iswctype
_strupr
bsearch
_strnicmp
memcmp
_wspawnl
_abnormal_termination
_rotl
_flsbuf
isdigit
memmove
_isctype
isalpha
isgraph
_wspawnvpe
_wexecve
_wcslwr
_wcsrev
fputwc
_fcvt
_ultoa
tmpnam
_wcreat
winmm
timeSetEvent
waveOutOpen
midiConnect
midiOutSetVolume
mmioOpenA
mmioWrite
DrvGetModuleHandle
mciGetDeviceIDFromElementIDW
waveOutGetErrorTextW
joyGetPosEx
mixerSetControlDetails
joySetThreshold
mmioRead
waveOutGetDevCapsA
DefDriverProc
mmioDescend
mixerGetLineInfoA
mciSendStringA
midiOutClose
midiInGetDevCapsW
midiStreamOut
mmioSetBuffer
midiInClose
waveOutReset
midiOutPrepareHeader
waveInGetPosition
GetDriverModuleHandle
mmioGetInfo
midiInMessage
mciGetCreatorTask
auxGetVolume
joyGetDevCapsW
waveInGetErrorTextA
mixerGetLineControlsW
mscms
GetColorProfileElement
UninstallColorProfileA
AssociateColorProfileWithDeviceA
EnumColorProfilesW
GetStandardColorSpaceProfileW
DisassociateColorProfileFromDeviceW
GetStandardColorSpaceProfileA
SetStandardColorSpaceProfileW
DeleteColorTransform
GetPS2ColorRenderingIntent
SetColorProfileHeader
TranslateBitmapBits
CreateColorTransformA
ConvertIndexToColorName
CreateProfileFromLogColorSpaceW
RegisterCMMW
GetColorProfileElementTag
GetColorProfileFromHandle
UninstallColorProfileW
CreateMultiProfileTransform
GetCountColorProfileElements
InstallColorProfileA
CreateColorTransformW
CheckColors
SetColorProfileElementReference
Name
.text
Size
24KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.u
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
32KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=3, id=125, productName=VS2005 build 50727, version=50727,
count=26, id=109, productName=VS2005 build 50727, version=50727,
count=19, id=123, productName=VS2005 build 50727, version=50727,
count=113, id=1, productName=Unmarked objects,
count=6, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,