@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo
Overview
overview
4Static
static
329A#2.js
windows7-x64
329A#2.js
windows10-2004-x64
329A#2.vbs
windows7-x64
129A#2.vbs
windows10-2004-x64
129A#2.vbs
windows7-x64
129A#2.vbs
windows10-2004-x64
129A#2.ps1
windows7-x64
329A#2.ps1
windows10-2004-x64
329A#2.vbs
windows7-x64
129A#2.vbs
windows10-2004-x64
129A#2.exe
windows7-x64
29A#2.exe
windows10-2004-x64
FILES/GETPROC.exe
windows7-x64
1FILES/GETPROC.exe
windows10-2004-x64
3FILES/IAVR.exe
windows7-x64
FILES/IAVR.exe
windows10-2004-x64
ANDROID.com
windows7-x64
ANDROID.com
windows10-2004-x64
CABANAS.exe
windows7-x64
3CABANAS.exe
windows10-2004-x64
3CAP.doc
windows7-x64
4CAP.doc
windows10-2004-x64
1ELVIRA.com
windows7-x64
ELVIRA.com
windows10-2004-x64
ESPERANT.ps1
windows7-x64
3ESPERANT.ps1
windows10-2004-x64
3ESPERANT.exe
windows7-x64
ESPERANT.exe
windows10-2004-x64
ESPO_NE.exe
windows7-x64
ESPO_NE.exe
windows10-2004-x64
GOLLUM.exe
windows7-x64
GOLLUM.exe
windows10-2004-x64
Static task
static1
Behavioral task
behavioral1
Sample
29A#2.js
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
29A#2.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
29A#2.vbs
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
29A#2.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
29A#2.vbs
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
29A#2.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
29A#2.ps1
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
29A#2.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
29A#2.vbs
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
29A#2.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
29A#2.exe
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
29A#2.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
FILES/GETPROC.exe
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
FILES/GETPROC.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
FILES/IAVR.exe
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
FILES/IAVR.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
ANDROID.com
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
ANDROID.com
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
CABANAS.exe
Resource
win7-20240729-en
Behavioral task
behavioral20
Sample
CABANAS.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
CAP.doc
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
CAP.doc
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
ELVIRA.com
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
ELVIRA.com
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
ESPERANT.ps1
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
ESPERANT.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
ESPERANT.exe
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
ESPERANT.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
ESPO_NE.exe
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
ESPO_NE.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
GOLLUM.exe
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
GOLLUM.exe
Resource
win10v2004-20240802-en
Target
29a-2.zip
Size
1.3MB
MD5
dfae5b73bff815abfccdb131f076669b
SHA1
1a5ca409294e302de3b0e65b8dacea22deba3c6c
SHA256
12836edb50243d623958df4302d72e75868e23c0b5d03928bebd7f9b8d7c2c16
SHA512
d2c4b3cd6b205bcae7cbc29f4d9d4ae780ccf665e15113c6a836b7b5e9a3e8bcf1a6981ad5e0d755121e5be2d5c1ae2fdc3b266540a5da767faf2e21f8202381
SSDEEP
24576:u+8wbu3Y0lFh7HVEnNxmFJ1rrIfarTDeZcNeeZc:Iwi3dFJHKNEuaaOAz
Checks for missing Authenticode signature.
resource |
---|
unpack001/FILES/GETPROC.EXE |
unpack004/CABANAS.EXE |
unpack007/ESPERANT.EXE |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetStdHandle
EnterCriticalSection
CloseHandle
FreeLibrary
GetCommandLineA
GetCurrentThreadId
CreateFileA
GetFileAttributesA
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetEnvironmentStrings
ExitProcess
GetVersion
GetVersionExA
GlobalMemoryStatus
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
RaiseException
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WriteFile
GetStartupInfoA
MessageBoxA
EnumThreadWindows
@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
ExitProcess
GetProcAddress
GetModuleHandleA
MessageBoxA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PulseEvent
Sleep
lstrlenA
CreateEventA
OpenEventA
ExitThread
lstrcpyA
WaitForSingleObject
CreateThread
CreateProcessA
GlobalFree
lstrcmpA
ReadFile
GlobalAlloc
GetFileSize
CreateFileA
GetDriveTypeA
GetLogicalDriveStringsA
GetModuleFileNameA
GetStartupInfoA
GetModuleHandleA
CloseHandle
DispatchMessageA
PostThreadMessageA
PostMessageA
DefWindowProcA
RegisterClassA
GetMessageA
CreateWindowExA
GetStockObject
_acmdln
_initterm
__getmainargs
_controlfp
memcpy
_exit
_XcptFilter
exit
_adjust_fdiv
__setusermatherr
__set_app_type
__p__commode
__p__fmode
_except_handler3
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE