4d943e11191eac4f61834e3c9f9a0168.zip
- SHA256 8525d41164c34fec50e9e7075cfdbfafa4e8413a72a430a2517499e0772fd257
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ab2a9c294555f8be58430eef220ce3812dc01ca9b3478806464e6f69e491c7aa.exe
Resource
win7-20240704-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
ab2a9c294555f8be58430eef220ce3812dc01ca9b3478806464e6f69e491c7aa.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
10 signatures
150 seconds
General
- Target 4d943e11191eac4f61834e3c9f9a0168.zip
- Size 40KB
- Sample240831-t657dathne
- SHA256 8525d41164c34fec50e9e7075cfdbfafa4e8413a72a430a2517499e0772fd257
- MD5 e15084fbc10832d8c6fc72274412a956
- SHA1 9619b34298972486a1ac13de893fbdc67fd3e409
- SHA512 ed5e8046e65c3fbd6f3a63ed2f2b1881ae2cac336bca26927e542151949eeed88c12c5fd5cab72c687fe05720b00909d9705d22077abf53b872b6c9edd1800b7
- SSDEEP 768:NvbGHSY1LENWZ1C8Zp2pk6cxwGCQos3y++ST4mfp/FNTnnmMlvh6:NTGH1pZ08D2H6wlHs3y++c4mRvDvA
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ab2a9c294555f8be58430eef220ce3812dc01ca9b3478806464e6f69e491c7aa
File Explorer
-
4d943e11191eac4f61834e3c9f9a0168.zip.zip 40KB
-
ab2a9c294555f8be58430eef220ce3812dc01ca9b3478806464e6f69e491c7aa.exe 96KB
ab2a9c294555f8be58430eef220ce3812dc01ca9b3478806464e6f69e491c7aa
- IMPHASH fbfc7e971b9381e12ce92088c6ae4c7f
- SHA256 ab2a9c294555f8be58430eef220ce3812dc01ca9b3478806464e6f69e491c7aa
- MD5 4d943e11191eac4f61834e3c9f9a0168
- SHA1 2fedc1de71f27d21f0924683191cf826be90e594
- SHA512 a648ac664ef4ef373dcd1db193acd79bacaef2ec38c0d4869d8220e5cfdf71003130da61b8c501a514cbe95a3db4cd7c0218cefeaab1e8a9e3e66bc3664b4e2b
- SSDEEP 1536:ciLOvRmmQegJW3aOgBbmAQ256/ZrwWnwqjhurmKFct:ciyvRmQKTLs/ZrwWJjAqGct
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
23168
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
AddAtomW
FreeConsole
GetCurrencyFormatW
IsProcessorFeaturePresent
CreateEventA
OpenFileMappingW
LocalHandle
HeapSize
MulDiv
WriteFile
GetTempFileNameW
SetLocaleInfoW
DosDateTimeToFileTime
EnumLanguageGroupLocalesW
CreatePipe
GetPrivateProfileSectionNamesA
SetConsoleTitleA
CancelDeviceWakeupRequest
GetVolumePathNameA
GetProfileIntA
GetDateFormatA
DebugBreak
SuspendThread
SetCommMask
EnumUILanguagesW
MoveFileWithProgressA
BackupRead
GetNumberOfConsoleInputEvents
GetLongPathNameA
FreeLibrary
GetFileAttributesW
EnumDateFormatsA
QueryDosDeviceA
UpdateResourceW
WritePrivateProfileStructA
lstrcpynA
GetExitCodeProcess
GlobalAddAtomW
GetShortPathNameW
UnlockFileEx
SetComputerNameExA
GetExitCodeProcess
gdi32
GetDeviceCaps
ole32
OleCreateFromData
HWND_UserMarshal
CreateAntiMoniker
CoInitialize
CoSetProxyBlanket
CoDisconnectObject
ReleaseStgMedium
HGLOBAL_UserSize
PropStgNameToFmtId
msvcrt
iswprint
_wgetenv
srand
strtok
iswupper
tolower
fputs
_swab
wcsncpy
_fputchar
iswctype
_strupr
bsearch
_strnicmp
memcmp
_wspawnl
_abnormal_termination
_rotl
_flsbuf
isdigit
memmove
_isctype
isalpha
isgraph
_wspawnvpe
_wexecve
_wcslwr
_wcsrev
fputwc
_fcvt
_ultoa
tmpnam
_wcreat
winmm
timeSetEvent
waveOutOpen
midiConnect
midiOutSetVolume
mmioOpenA
mmioWrite
DrvGetModuleHandle
mciGetDeviceIDFromElementIDW
waveOutGetErrorTextW
joyGetPosEx
mixerSetControlDetails
joySetThreshold
mmioRead
waveOutGetDevCapsA
DefDriverProc
mmioDescend
mixerGetLineInfoA
mciSendStringA
midiOutClose
midiInGetDevCapsW
midiStreamOut
mmioSetBuffer
midiInClose
waveOutReset
midiOutPrepareHeader
waveInGetPosition
GetDriverModuleHandle
mmioGetInfo
midiInMessage
mciGetCreatorTask
auxGetVolume
joyGetDevCapsW
waveInGetErrorTextA
mixerGetLineControlsW
mscms
GetColorProfileElement
UninstallColorProfileA
AssociateColorProfileWithDeviceA
EnumColorProfilesW
GetStandardColorSpaceProfileW
DisassociateColorProfileFromDeviceW
GetStandardColorSpaceProfileA
SetStandardColorSpaceProfileW
DeleteColorTransform
GetPS2ColorRenderingIntent
SetColorProfileHeader
TranslateBitmapBits
CreateColorTransformA
ConvertIndexToColorName
CreateProfileFromLogColorSpaceW
RegisterCMMW
GetColorProfileElementTag
GetColorProfileFromHandle
UninstallColorProfileW
CreateMultiProfileTransform
GetCountColorProfileElements
InstallColorProfileA
CreateColorTransformW
CheckColors
SetColorProfileElementReference
Name
.text
Size
24KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.mforJy
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.o7sqs
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
32KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=3, id=125, productName=VS2005 build 50727, version=50727,
count=26, id=109, productName=VS2005 build 50727, version=50727,
count=19, id=123, productName=VS2005 build 50727, version=50727,
count=113, id=1, productName=Unmarked objects,
count=6, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,